6b4593936bb09ed1e6f6a247c6b97dd73cdf34b77f94ff3b6845260c29b04c85

General

Target
6b4593936bb09ed1e6f6a247c6b97dd73cdf34b77f94ff3b6845260c29b04c85
Size 194KB
Sample221115-y992ysfg34
SHA256 6b4593936bb09ed1e6f6a247c6b97dd73cdf34b77f94ff3b6845260c29b04c85
MD5 712a9a2355918d292756535ee05eea65
SHA1 77c2e0d71eb54a4a562556dafb057eb24a1c5183
SHA512 89bbbebffc842b62525179b879e00ca0faf9392a0c8b7b70b64c8220b8b211c8467177509074d73d341dec13cd97e5a9f1e71539954eaa5c6f0ca073b2bf6185
SSDEEP 3072:QchAKwq5u3TpsTuklIYRUgC9eL/jxqUH0eWPdYlvTIUtnrkHD:/hHOguklIYRUbeDFq+tsUtr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6b4593936bb09ed1e6f6a247c6b97dd73cdf34b77f94ff3b6845260c29b04c85

.exe 194KB

6b4593936bb09ed1e6f6a247c6b97dd73cdf34b77f94ff3b6845260c29b04c85

IMPHASH da4d9e635f7f54701e49245bae5e7151
SHA256 6b4593936bb09ed1e6f6a247c6b97dd73cdf34b77f94ff3b6845260c29b04c85
MD5 712a9a2355918d292756535ee05eea65
SHA1 77c2e0d71eb54a4a562556dafb057eb24a1c5183
SHA512 89bbbebffc842b62525179b879e00ca0faf9392a0c8b7b70b64c8220b8b211c8467177509074d73d341dec13cd97e5a9f1e71539954eaa5c6f0ca073b2bf6185
SSDEEP 3072:QchAKwq5u3TpsTuklIYRUgC9eL/jxqUH0eWPdYlvTIUtnrkHD:/hHOguklIYRUbeDFq+tsUtr
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14983

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW OpenMutexA CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsSetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExW GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer GetModuleHandleW InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

6b4593936bb09ed1e6f6a247c6b97dd73cdf34b77f94ff3b6845260c29b04c85

kernel32

user32