29fe3a6bf74a80fdfb2e291e8cce49acc85bb3bb0bdb9869f50744ced6bd5411

General

Target
29fe3a6bf74a80fdfb2e291e8cce49acc85bb3bb0bdb9869f50744ced6bd5411
Size 299KB
Sample221101-b1brgafhdm
SHA256 29fe3a6bf74a80fdfb2e291e8cce49acc85bb3bb0bdb9869f50744ced6bd5411
MD5 19ab1481eec86a9b75a59a71f0020302
SHA1 4a2723d1615d4edfe7ed8bfff929056488bcd291
SHA512 d7c960da1ffe65a910d02d8186e91c92e435586b93a163f1908beb7a2fa18d8982d6361b1a31d63f6c356e38af808808cf3e89e9084bc54c5c26973689ebc660
SSDEEP 6144:YzgHa9juHWL94y1E9Dc3phGf3YlCvX0gGhjNcs:Yzkaxhx4y1E9DcO/Yyrs
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

29fe3a6bf74a80fdfb2e291e8cce49acc85bb3bb0bdb9869f50744ced6bd5411

.exe 299KB

29fe3a6bf74a80fdfb2e291e8cce49acc85bb3bb0bdb9869f50744ced6bd5411

IMPHASH 155a8220c3a90cd41bc56b1f2b0907bc
SHA256 29fe3a6bf74a80fdfb2e291e8cce49acc85bb3bb0bdb9869f50744ced6bd5411
MD5 19ab1481eec86a9b75a59a71f0020302
SHA1 4a2723d1615d4edfe7ed8bfff929056488bcd291
SHA512 d7c960da1ffe65a910d02d8186e91c92e435586b93a163f1908beb7a2fa18d8982d6361b1a31d63f6c356e38af808808cf3e89e9084bc54c5c26973689ebc660
SSDEEP 6144:YzgHa9juHWL94y1E9Dc3phGf3YlCvX0gGhjNcs:Yzkaxhx4y1E9DcO/Yyrs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37702

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedExchange GetTickCount GetNumaProcessorNode GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW SetWaitableTimer GetVersionExA FindResourceW OpenEventA SearchPathA GetComputerNameA CallNamedPipeA GetProcAddress GlobalAlloc FoldStringA SetFileTime GetConsoleAliasesLengthA GetSystemWindowsDirectoryA GetPrivateProfileStructW GetACP SetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxW FindNextVolumeA InterlockedIncrement GetComputerNameW CancelDeviceWakeupRequest GetConsoleFontSize InterlockedCompareExchange GetPrivateProfileStructA EnumCalendarInfoW EnterCriticalSection InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI SetLastError WriteConsoleW GetVolumeInformationA GetThreadPriority LoadLibraryW Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing

General

Malware Config

Signatures

File Explorer

29fe3a6bf74a80fdfb2e291e8cce49acc85bb3bb0bdb9869f50744ced6bd5411

kernel32

gdi32

advapi32