b97dfdb8e99e26332aea46dd075c02bd1cbdaed0edc04423422e2ca5818c301b

General

Target
b97dfdb8e99e26332aea46dd075c02bd1cbdaed0edc04423422e2ca5818c301b
Size 682KB
Sample221108-s94maagdam
SHA256 b97dfdb8e99e26332aea46dd075c02bd1cbdaed0edc04423422e2ca5818c301b
MD5 2eabb8109c2e76505ed6dd3b29f3ff49
SHA1 09323bafbddc678af0d96aa95d5413e52e490ae0
SHA512 c45908a2ccb3fc52a42948a14830b383542c8d3c009618a861ca0cdbab52584dc21e78ae6b92b33d34b3842600243d48a292edf091f764b579abdffb471d300e
SSDEEP 12288:5NyawwrjP1sgg1gycXbdJ2NgmQyqsD9UHTNS8cGWGrHPYaLcgi9L:nwWb1sg+kXb2N9+HTU8cVGrvTLcgi9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b97dfdb8e99e26332aea46dd075c02bd1cbdaed0edc04423422e2ca5818c301b

.exe 682KB

b97dfdb8e99e26332aea46dd075c02bd1cbdaed0edc04423422e2ca5818c301b

IMPHASH b95a3cd963ad0eff6b25d585db1e99e4
SHA256 b97dfdb8e99e26332aea46dd075c02bd1cbdaed0edc04423422e2ca5818c301b
MD5 2eabb8109c2e76505ed6dd3b29f3ff49
SHA1 09323bafbddc678af0d96aa95d5413e52e490ae0
SHA512 c45908a2ccb3fc52a42948a14830b383542c8d3c009618a861ca0cdbab52584dc21e78ae6b92b33d34b3842600243d48a292edf091f764b579abdffb471d300e
SSDEEP 12288:5NyawwrjP1sgg1gycXbdJ2NgmQyqsD9UHTNS8cGWGrHPYaLcgi9L:nwWb1sg+kXb2N9+HTU8cVGrvTLcgi9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25686

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalFlags InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExW MoveFileWithProgressW SetVolumeLabelW GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualQuery WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleW VirtualProtect FindNextVolumeMountPointW IsBadWritePtr GlobalDeleteAtom LoadResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceW OpenEventA SearchPathA ReadConsoleW CallNamedPipeW GetProcAddress GetModuleHandleA GlobalAlloc GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA GetComputerNameW MoveFileW EnumCalendarInfoA InterlockedIncrement GetPrivateProfileStructA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InitializeCriticalSection InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI SetFileTime GetThreadPriority LoadLibraryW CreateFileA Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle

user32

GetAltTabInfoW

advapi32

SetThreadToken

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

b97dfdb8e99e26332aea46dd075c02bd1cbdaed0edc04423422e2ca5818c301b

kernel32

user32

advapi32

winhttp