3a80e129940958b6c65fbc497fcc56a59c0fdaa2a66e4b6963de9d4eff8db054

General

Target
3a80e129940958b6c65fbc497fcc56a59c0fdaa2a66e4b6963de9d4eff8db054
Size 871KB
Sample221110-qw2vescbep
SHA256 3a80e129940958b6c65fbc497fcc56a59c0fdaa2a66e4b6963de9d4eff8db054
MD5 9ba9d664a890c0f6c2d4308be9c49187
SHA1 d3df8458501055c878ac340546c7d7cf374b5b92
SHA512 668f938ea5f3622565f042d4bea1d1e31040f488b30924ab594c44b99fd0e30f0a7fa69b32e8258610d5efe37f7208061759f7921e9767c1d49ef0dca982b825
SSDEEP 12288:ycW2ijVniMWIcw+unMfEkl9KoGZLz4ipRo7oK1BgBGc27xNbeDI+6:yBjVn9hFMcs9vCzVvKB57Xk6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3a80e129940958b6c65fbc497fcc56a59c0fdaa2a66e4b6963de9d4eff8db054

.exe 871KB

3a80e129940958b6c65fbc497fcc56a59c0fdaa2a66e4b6963de9d4eff8db054

IMPHASH 2751973a1f0bf5da4196dfeed17df118
SHA256 3a80e129940958b6c65fbc497fcc56a59c0fdaa2a66e4b6963de9d4eff8db054
MD5 9ba9d664a890c0f6c2d4308be9c49187
SHA1 d3df8458501055c878ac340546c7d7cf374b5b92
SHA512 668f938ea5f3622565f042d4bea1d1e31040f488b30924ab594c44b99fd0e30f0a7fa69b32e8258610d5efe37f7208061759f7921e9767c1d49ef0dca982b825
SSDEEP 12288:ycW2ijVniMWIcw+unMfEkl9KoGZLz4ipRo7oK1BgBGc27xNbeDI+6:yBjVn9hFMcs9vCzVvKB57Xk6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26787

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA GetCommState WaitNamedPipeA AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW GetVolumePathNameA lstrlenW GetTempPathW LCMapStringA GetConsoleAliasExesLengthA GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW SetProcessWorkingSetSize OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA GetFileAttributesExW GetLastError GetThreadContext MultiByteToWideChar Sleep ExitProcess GetStartupInfoW HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection CloseHandle RaiseException WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP WriteConsoleW

gdi32

GetTextExtentExPointW

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

3a80e129940958b6c65fbc497fcc56a59c0fdaa2a66e4b6963de9d4eff8db054

kernel32

gdi32

shell32