56692389bbf7a48fc189ab0975534563ed676a50db7c94a9809415232fa498d0

General

Target
56692389bbf7a48fc189ab0975534563ed676a50db7c94a9809415232fa498d0
Size 190KB
Sample221111-k2sk2sbac9
SHA256 56692389bbf7a48fc189ab0975534563ed676a50db7c94a9809415232fa498d0
MD5 3fa9b77952faa7ca394215a860d03001
SHA1 5415323462af8ffad2bea30b04772f33eafffa24
SHA512 e2c91f97d76d8f89e8a1db105068ca969c7bc4f4c65f3ef05daa04d1b96e9747511c562ef95781f3bd9581acb220f8cdc43a5127408fd56e6092b391ea79580e
SSDEEP 3072:WUXtAt+vJL1zCNpSRRG4gw40KoC5bXu5cOCElAqQldPdNEia:3tLRL1zCNznJe5DnlAhd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

56692389bbf7a48fc189ab0975534563ed676a50db7c94a9809415232fa498d0

.exe 190KB

56692389bbf7a48fc189ab0975534563ed676a50db7c94a9809415232fa498d0

IMPHASH 00a644324a239466ceb73fc87ff9b5b9
SHA256 56692389bbf7a48fc189ab0975534563ed676a50db7c94a9809415232fa498d0
MD5 3fa9b77952faa7ca394215a860d03001
SHA1 5415323462af8ffad2bea30b04772f33eafffa24
SHA512 e2c91f97d76d8f89e8a1db105068ca969c7bc4f4c65f3ef05daa04d1b96e9747511c562ef95781f3bd9581acb220f8cdc43a5127408fd56e6092b391ea79580e
SSDEEP 3072:WUXtAt+vJL1zCNpSRRG4gw40KoC5bXu5cOCElAqQldPdNEia:3tLRL1zCNznJe5DnlAhd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32694

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom CreateMemoryResourceNotification WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeW GetProcAddress GetModuleHandleA SetFileTime GetVolumeNameForVolumeMountPointA GetVolumePathNameW FatalAppExitA TerminateThread GetSystemWindowsDirectoryA ResetWriteWatch GetMailslotInfo GetConsoleAliasA SetThreadUILanguage GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx InitializeCriticalSection FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI GetTickCount AddAtomW CreateFileA CloseHandle InterlockedDecrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

56692389bbf7a48fc189ab0975534563ed676a50db7c94a9809415232fa498d0

kernel32

user32

winhttp