file

General

Target
file
Size 268KB
Sample221101-by5a1afaa3
SHA256 361859cd7b10f99e26728ecd3dabcbdd801f4a4ae79d17e15cae9417bdece46f
MD5 44ed014f6bde025da0dfcb1099a869e9
SHA1 754db430a87cc26371a2c59f4ce4337720ddf418
SHA512 8ac41355e82fe797c5b938a0fc4ee76ca485658e2e6f361ae03a99740100b11b21bae04019301d268c45a7eadbedf2ea456a129a7aeda7ba9b4d2980c14b4724
SSDEEP 6144:LVmgSwh3WELu32FVcA2y2miHVRuO07s/bbEc3pZI0VCa:LV4whh423cy2zQ5kbbEc3g0Ua
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file

.exe 268KB

IMPHASH 155a8220c3a90cd41bc56b1f2b0907bc
SHA256 361859cd7b10f99e26728ecd3dabcbdd801f4a4ae79d17e15cae9417bdece46f
MD5 44ed014f6bde025da0dfcb1099a869e9
SHA1 754db430a87cc26371a2c59f4ce4337720ddf418
SHA512 8ac41355e82fe797c5b938a0fc4ee76ca485658e2e6f361ae03a99740100b11b21bae04019301d268c45a7eadbedf2ea456a129a7aeda7ba9b4d2980c14b4724
SSDEEP 6144:LVmgSwh3WELu32FVcA2y2miHVRuO07s/bbEc3pZI0VCa:LV4whh423cy2zQ5kbbEc3g0Ua
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37702

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedExchange GetTickCount GetNumaProcessorNode GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW SetWaitableTimer GetVersionExA FindResourceW OpenEventA SearchPathA GetComputerNameA CallNamedPipeA GetProcAddress GlobalAlloc FoldStringA SetFileTime GetConsoleAliasesLengthA GetSystemWindowsDirectoryA GetPrivateProfileStructW GetACP SetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxW FindNextVolumeA InterlockedIncrement GetComputerNameW CancelDeviceWakeupRequest GetConsoleFontSize InterlockedCompareExchange GetPrivateProfileStructA EnumCalendarInfoW EnterCriticalSection InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI SetLastError WriteConsoleW GetVolumeInformationA GetThreadPriority LoadLibraryW Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing