2aa99834b2b119c65fcde0d3fb409fa0c6899ad849ae98f3f1b5d2ebe1f876f9

General

Target
2aa99834b2b119c65fcde0d3fb409fa0c6899ad849ae98f3f1b5d2ebe1f876f9
Size 286KB
Sample221030-jqedlsaba4
SHA256 2aa99834b2b119c65fcde0d3fb409fa0c6899ad849ae98f3f1b5d2ebe1f876f9
MD5 2056a6679f355c555eac5c2b14694005
SHA1 4a9636f38c83789ead787b228576d06bf0b74092
SHA512 3ada01790c5dd2c4c8f1efc1919e54ada045e41007402fd361978acdbe1e4c257cb3bd2397cf62e856a767352d83672459e0db51f6e485667387beb0b50292b5
SSDEEP 6144:tU2vnLklICz535zAUMoG6a9qAh3r3gwAX:tU2fUb5JzdG665h3u
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2aa99834b2b119c65fcde0d3fb409fa0c6899ad849ae98f3f1b5d2ebe1f876f9

.exe 286KB

2aa99834b2b119c65fcde0d3fb409fa0c6899ad849ae98f3f1b5d2ebe1f876f9

IMPHASH c6d7d364c23cac1d913e448aed4cdb7b
SHA256 2aa99834b2b119c65fcde0d3fb409fa0c6899ad849ae98f3f1b5d2ebe1f876f9
MD5 2056a6679f355c555eac5c2b14694005
SHA1 4a9636f38c83789ead787b228576d06bf0b74092
SHA512 3ada01790c5dd2c4c8f1efc1919e54ada045e41007402fd361978acdbe1e4c257cb3bd2397cf62e856a767352d83672459e0db51f6e485667387beb0b50292b5
SSDEEP 6144:tU2vnLklICz535zAUMoG6a9qAh3r3gwAX:tU2fUb5JzdG665h3u
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18916

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetTickCount GetConsoleAliasesLengthA GetGeoInfoW WriteFile GetConsoleCP GlobalAlloc LoadLibraryW Sleep ReadConsoleInputA AssignProcessToJobObject HeapDestroy GetFileAttributesA EnumSystemCodePagesA CreateMutexW GetFileAttributesW WriteConsoleW GetSystemDirectoryA lstrlenW LCMapStringA GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW LCMapStringW GetConsoleAliasW GetSystemDefaultLangID HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing

General

Malware Config

Signatures

File Explorer

2aa99834b2b119c65fcde0d3fb409fa0c6899ad849ae98f3f1b5d2ebe1f876f9

kernel32

advapi32