08617322a6d4f1d56dda65c0fcc4017688e4734ca3e807b6bd126f174bfea547

General

Target
08617322a6d4f1d56dda65c0fcc4017688e4734ca3e807b6bd126f174bfea547
Size 37KB
Sample221028-x3ersscbc2
SHA256 08617322a6d4f1d56dda65c0fcc4017688e4734ca3e807b6bd126f174bfea547
MD5 00ab232b8deb4a3d72b65d254aa83d00
SHA1 791da43b4d2804e89a59a4660dc2b2d878b72fa3
SHA512 2cea5ea258ef536c80789559ed54b51939a5d897be37d9a7ed24d02efbb82e0c878021879f693aa6e95428403cec6c1e12ac5b60d931d985b9ffd667a50f938f
SSDEEP 768:wE7+RUCYfIYILhtY+Y+Y+Y+Y+Y+4PNUQnHcyi8lBdY5g:b7xVgY2htY+Y+Y+Y+Y+Y+4XcyiGdY5g
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

08617322a6d4f1d56dda65c0fcc4017688e4734ca3e807b6bd126f174bfea547

.exe 37KB

08617322a6d4f1d56dda65c0fcc4017688e4734ca3e807b6bd126f174bfea547

IMPHASH ee081908cf045bfcfd32c8054474c462
SHA256 08617322a6d4f1d56dda65c0fcc4017688e4734ca3e807b6bd126f174bfea547
MD5 00ab232b8deb4a3d72b65d254aa83d00
SHA1 791da43b4d2804e89a59a4660dc2b2d878b72fa3
SHA512 2cea5ea258ef536c80789559ed54b51939a5d897be37d9a7ed24d02efbb82e0c878021879f693aa6e95428403cec6c1e12ac5b60d931d985b9ffd667a50f938f
SSDEEP 768:wE7+RUCYfIYILhtY+Y+Y+Y+Y+Y+4PNUQnHcyi8lBdY5g:b7xVgY2htY+Y+Y+Y+Y+Y+4XcyiGdY5g
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12243

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ulib

?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ ??0REST_OF_LINE_ARGUMENT@@QAE@XZ ??0PATH_ARGUMENT@@QAE@XZ ??0LONG_ARGUMENT@@QAE@XZ ?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z ??0STRING_ARGUMENT@@QAE@XZ ??0ARRAY@@QAE@XZ ??0ARGUMENT_LEXEMIZER@@QAE@XZ ??0STREAM_MESSAGE@@QAE@XZ ?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ ?Initialize@STRING_ARGUMENT@@QAEEPAD@Z ?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z ?Initialize@LONG_ARGUMENT@@QAEEPAD@Z ?Initialize@PATH_ARGUMENT@@QAEEPADE@Z ?Initialize@REST_OF_LINE_ARGUMENT@@QAEEXZ ?Put@ARRAY@@UAEEPAVOBJECT@@@Z ?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z ?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z ?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ ?IsValueSet@ARGUMENT@@QAEEXZ ?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z ?Initialize@ARRAY@@QAEEKK@Z ?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z ?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z ?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z ??1PATH_ARGUMENT@@UAE@XZ ??1STRING_ARGUMENT@@UAE@XZ ??1ARRAY@@UAE@XZ ??1ARGUMENT_LEXEMIZER@@UAE@XZ ??1STREAM_MESSAGE@@UAE@XZ ??1OBJECT@@UAE@XZ ?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z ?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z ?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z ?Initialize@WSTRING@@QAEEPBV1@KK@Z ?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z ??0DSTRING@@QAE@XZ ?Initialize@WSTRING@@QAEEPBGK@Z ?Strcat@WSTRING@@QAEEPBV1@@Z ??1DSTRING@@UAE@XZ ?DeleteChAt@WSTRING@@QAEXKK@Z ?Display@MESSAGE@@QAAEPBDZZ ??0FLAG_ARGUMENT@@QAE@XZ ?Initialize@WSTRING@@QAEEPBDK@Z

kernel32

GetModuleHandleA GetConsoleAliasesLengthW GetConsoleAliasExesW GetConsoleAliasExesLengthW AddConsoleAliasW GetConsoleCommandHistoryW GetConsoleCommandHistoryLengthW SetConsoleCommandHistoryMode SetConsoleNumberOfCommandsW ExpungeConsoleCommandHistoryW GetConsoleAliasesW

ntdll

wcschr RtlFreeHeap RtlAllocateHeap _wcsicmp

msvcrt

__initenv exit __getmainargs _XcptFilter _exit _c_exit _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp _except_handler3 _cexit

Sharing

General

Malware Config

Signatures

File Explorer

08617322a6d4f1d56dda65c0fcc4017688e4734ca3e807b6bd126f174bfea547

ulib

kernel32

ntdll

msvcrt