06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb

Sharing

Copy URL Twitter E-mail

General

Target
06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb
Size 228KB
Sample221031-2na8aaegdn
SHA256 06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb
MD5 a66c995903e391fb89744b65922bf12a
SHA1 856c25cdb3fb257888d8e8a367a2520d531d1288
SHA512 bf852a22d65192d204d957499d9b62d610259456609d4d2504daa0dc59bede22375cd4720a52f25b4a3506ed4ee3f90aad9828f9621c4c40e08f8633e35647eb
SSDEEP 3072:PO7i9xI8907UZSOSu8ISVXhoxgLxwEn1h9qG:PO7i9v90lOSLpVBLKEn1hgG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb

.exe 228KB

06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb

IMPHASH a0a4c86372feb92aaf6fbeeec2888189
SHA256 06255f2417ece0db24dd6d7b19156196290405226be9679f8ae67ae82e0122cb
MD5 a66c995903e391fb89744b65922bf12a
SHA1 856c25cdb3fb257888d8e8a367a2520d531d1288
SHA512 bf852a22d65192d204d957499d9b62d610259456609d4d2504daa0dc59bede22375cd4720a52f25b4a3506ed4ee3f90aad9828f9621c4c40e08f8633e35647eb
SSDEEP 3072:PO7i9xI8907UZSOSu8ISVXhoxgLxwEn1h9qG:PO7i9v90lOSLpVBLKEn1hgG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19808

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcpyA lstrlenA lstrcmpA GetModuleFileNameA GetPrivateProfileStringA GetProfileStringA SetFileAttributesW SetFilePointer SetStdHandle HeapReAlloc VirtualAlloc HeapAlloc GetOEMCP SetFileAttributesA DeleteFileW DeleteFileA RemoveDirectoryW RemoveDirectoryA CreateDirectoryW CreateDirectoryA GetWindowsDirectoryA WideCharToMultiByte MultiByteToWideChar GetVersion GetACP GetCPInfo LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA FlushFileBuffers HeapValidate GetLastError GetFileAttributesA GetModuleHandleA GetStartupInfoA GetCommandLineA ExitProcess DebugBreak GetStdHandle WriteFile InterlockedDecrement OutputDebugStringA GetProcAddress LoadLibraryA InterlockedIncrement TerminateProcess GetCurrentProcess SetConsoleCtrlHandler UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate HeapFree VirtualFree RtlUnwind IsBadWritePtr IsBadReadPtr CloseHandle

user32

ReleaseDC wsprintfA GetSystemMetrics GetDC MessageBoxA

gdi32

GetDeviceCaps

advapi32

RegDeleteValueA RegEnumValueA RegQueryValueExA RegSetValueExA RegOpenKeyExA RegDeleteKeyA RegCreateKeyExA RegCloseKey RegOpenKeyA

shell32

SHGetSpecialFolderPathW SHChangeNotify ShellExecuteA

ole32

CoUninitialize CoCreateInstance CoInitialize

Name

.text

Size

140KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

56KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ