51dc6532e6761f3f774f3e079d694bb82fc5c4a6acf75ea5e06edef18dca34c0

General

Target
51dc6532e6761f3f774f3e079d694bb82fc5c4a6acf75ea5e06edef18dca34c0
Size 683KB
Sample221107-znxp6shaf7
SHA256 51dc6532e6761f3f774f3e079d694bb82fc5c4a6acf75ea5e06edef18dca34c0
MD5 ef4f52543a50d2eb5a76466ce953dbee
SHA1 1dbe2ae13d22f4c2c24fe8bcfd7f6e492258f129
SHA512 a2fc282b3ed21676b988ef4c4f25da366c32da05d22efbd3f53a3e0b67c31034fc3f6cfab278fbe84cb89b80ca197d8e19a3616f24b5dd5ccca58c71798ba974
SSDEEP 12288:4+doC8kbS+IcbzEzdRMh1GbqhpkuBpvOl4A/W3msmXrzr2ro2gokpWaTGEPh:NQZkPEzdRGGbqHBaC/+rv2royuHG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

51dc6532e6761f3f774f3e079d694bb82fc5c4a6acf75ea5e06edef18dca34c0

.exe 683KB

51dc6532e6761f3f774f3e079d694bb82fc5c4a6acf75ea5e06edef18dca34c0

IMPHASH 8d88ea38e7678a5f75e68eda36b71079
SHA256 51dc6532e6761f3f774f3e079d694bb82fc5c4a6acf75ea5e06edef18dca34c0
MD5 ef4f52543a50d2eb5a76466ce953dbee
SHA1 1dbe2ae13d22f4c2c24fe8bcfd7f6e492258f129
SHA512 a2fc282b3ed21676b988ef4c4f25da366c32da05d22efbd3f53a3e0b67c31034fc3f6cfab278fbe84cb89b80ca197d8e19a3616f24b5dd5ccca58c71798ba974
SSDEEP 12288:4+doC8kbS+IcbzEzdRMh1GbqhpkuBpvOl4A/W3msmXrzr2ro2gokpWaTGEPh:NQZkPEzdRGGbqHBaC/+rv2royuHG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25062

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalSize InterlockedDecrement GetTickCount SearchPathA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExA MoveFileWithProgressW VerifyVersionInfoW LocalLock WaitForDebugEvent GlobalGetAtomNameW MapViewOfFileEx GetModuleHandleW VirtualProtectEx GlobalDeleteAtom SizeofResource WriteConsoleInputW CopyFileW CancelWaitableTimer GlobalAlloc FindResourceW OpenEventW GetThreadPriority CallNamedPipeW GetProcAddress ReadConsoleA GetConsoleAliasesLengthW OpenFileMappingA GetSystemWindowsDirectoryA MoveFileW GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceW GetCPInfo SetProcessAffinityMask GlobalFindAtomW WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA InitializeCriticalSection GetComputerNameW CancelDeviceWakeupRequest EnterCriticalSection GetPrivateProfileStructA InterlockedExchangeAdd GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI GetModuleHandleA LoadLibraryW Sleep DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize VirtualAlloc HeapReAlloc GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

advapi32

SetThreadToken

Sharing

General

Malware Config

Signatures

File Explorer

51dc6532e6761f3f774f3e079d694bb82fc5c4a6acf75ea5e06edef18dca34c0

kernel32

advapi32