file

General

Target
file
Size 214KB
Sample221107-m685psfcbn
SHA256 0cb2cd639be24e91df57e40dfeac93539fbeecd94678163f5d05790982ab3677
MD5 7bb3cf423412fe38357326945d4031b0
SHA1 31f41d271871b2c23ba0cce639e7a3b0d0a5c9a3
SHA512 29eadd84bfb1216ec708bd9c390c66de789fca2dc9e26d402af2ec0481ab82540a637cae1ae9487a6b446712a7c1397c2c27cdf38776ae325cf5c35a012d84af
SSDEEP 3072:MxBN005sbrgzLb9ypeUN5iNDgRruGE/6aYlUHuOT1YUsX1u7:MXD2ALQpeXlgFun/6CHeu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file

.exe 214KB

IMPHASH d4c5f97a5c4d3eaebbb1142457ab9469
SHA256 0cb2cd639be24e91df57e40dfeac93539fbeecd94678163f5d05790982ab3677
MD5 7bb3cf423412fe38357326945d4031b0
SHA1 31f41d271871b2c23ba0cce639e7a3b0d0a5c9a3
SHA512 29eadd84bfb1216ec708bd9c390c66de789fca2dc9e26d402af2ec0481ab82540a637cae1ae9487a6b446712a7c1397c2c27cdf38776ae325cf5c35a012d84af
SSDEEP 3072:MxBN005sbrgzLb9ypeUN5iNDgRruGE/6aYlUHuOT1YUsX1u7:MXD2ALQpeXlgFun/6CHeu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41030

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount CopyFileExW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtectEx GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW LockFile GetDiskFreeSpaceExW DefineDosDeviceW GetACP SetProcessAffinityMask GlobalFindAtomW WriteConsoleW MoveFileWithProgressA AddRefActCtx FindNextVolumeA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest LocalUnlock EnterCriticalSection GetPrivateProfileStructA GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA AreFileApisANSI SetLastError GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing