ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce

General

Target
ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce
Size 893KB
Sample221107-nsv7cseaa7
SHA256 ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce
MD5 12ede310f2741243d64908bdf8d9e7b4
SHA1 13b4411eddaf6a6e5712e74d8486e7bb559348d2
SHA512 26e09b59a5aef9aa934d47dc0c0f4f95b4db5e1e7b50a088b3296cf09bad752ca7fcfc28c95275aef7fe0bcc6c9935f0bf7dbb88fc5d257b1b2cae574ec38d1e
SSDEEP 24576:Z4fTaz+X/CMhIn1n0ibm+Itj/9gTNwei3:Z4fTaz+X/HOniibpst3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce

.exe 893KB

ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce

IMPHASH b926f23343eed0e77864b685e8a75b54
SHA256 ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce
MD5 12ede310f2741243d64908bdf8d9e7b4
SHA1 13b4411eddaf6a6e5712e74d8486e7bb559348d2
SHA512 26e09b59a5aef9aa934d47dc0c0f4f95b4db5e1e7b50a088b3296cf09bad752ca7fcfc28c95275aef7fe0bcc6c9935f0bf7dbb88fc5d257b1b2cae574ec38d1e
SSDEEP 24576:Z4fTaz+X/CMhIn1n0ibm+Itj/9gTNwei3:Z4fTaz+X/HOniibpst3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

171622

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA VirtualFree GetModuleHandleA GetCurrentProcessId GetModuleFileNameW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentThreadId WaitForSingleObject CloseHandle DeleteCriticalSection FreeLibrary IsWow64Process GetProcAddress VirtualAlloc GetCommandLineW GetTickCount CreateEventA Sleep SetEvent CreateEventW GetLastError GetFullPathNameW CopyFileW DeleteFileW GetCurrentProcess FreeResource SizeofResource LockResource LoadResource FindResourceExW VirtualProtect FindResourceW HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc IsProcessorFeaturePresent GetProcessHeap IsDebuggerPresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

CryptCreateHash BuildSecurityDescriptorA CryptDeriveKey

comctl32

ImageList_ReplaceIcon _TrackMouseEvent ImageList_Add

Sharing

General

Malware Config

Signatures

File Explorer

ab3f4fd651ae2d57c652b0cfde74774d4d246b213c2492bf5cc21a94744782ce

kernel32

advapi32

comctl32