74f4a9f80e94099b093c19c10402c2e74905796bf0168e842b65bd4c9cfaa15d

General

Target
74f4a9f80e94099b093c19c10402c2e74905796bf0168e842b65bd4c9cfaa15d
Size 195KB
Sample221116-ec7qsaha65
SHA256 74f4a9f80e94099b093c19c10402c2e74905796bf0168e842b65bd4c9cfaa15d
MD5 68cc01ae9ae11af059f93d03053480b8
SHA1 73d07a92870f9932ce59eb8be61f2a9e39a31416
SHA512 596274a9b0b7be3241d36019d6868df118818f60a9a9d3ba739be9c55dc172f723c969a5ffaf889d669c83fa73dc501d8c50a3e8b5be980733426ba2b550343a
SSDEEP 3072:SE3SHsu5YE3ndr4F6dTVCg/JZ0SVAfEPdYlvWEnaXQprkHD:vSHbndr4YdTMGJ6ltWaZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

74f4a9f80e94099b093c19c10402c2e74905796bf0168e842b65bd4c9cfaa15d

.exe 195KB

74f4a9f80e94099b093c19c10402c2e74905796bf0168e842b65bd4c9cfaa15d

IMPHASH b16ac9aa2cf798d442762ac865cf7759
SHA256 74f4a9f80e94099b093c19c10402c2e74905796bf0168e842b65bd4c9cfaa15d
MD5 68cc01ae9ae11af059f93d03053480b8
SHA1 73d07a92870f9932ce59eb8be61f2a9e39a31416
SHA512 596274a9b0b7be3241d36019d6868df118818f60a9a9d3ba739be9c55dc172f723c969a5ffaf889d669c83fa73dc501d8c50a3e8b5be980733426ba2b550343a
SSDEEP 3072:SE3SHsu5YE3ndr4F6dTVCg/JZ0SVAfEPdYlvWEnaXQprkHD:vSHbndr4YdTMGJ6ltWaZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14919

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW EnumSystemCodePagesA LocalFree FindNextFileW OpenMutexW CopyFileExA ReadConsoleOutputCharacterW SetVolumeLabelW ReadFileEx VerifyVersionInfoW QueryDosDeviceA EnumCalendarInfoExA RequestWakeupLatency LocalFlags TlsGetValue CreateFileA MapViewOfFile GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA WriteConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerA PeekNamedPipe GetCPInfoExA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GlobalAlloc MoveFileWithProgressA DeleteTimerQueue DeleteTimerQueueTimer InitializeCriticalSection FindNextVolumeW InterlockedIncrement GetACP HeapQueryInformation SetConsoleTitleW GetPrivateProfileStructA GetConsoleAliasExesLengthW InterlockedExchangeAdd EnumCalendarInfoW InterlockedDecrement GetEnvironmentStringsW GetModuleHandleW SetLastError GetConsoleAliasesLengthW GetVolumeNameForVolumeMountPointW SetCalendarInfoW TerminateProcess MoveFileA FindAtomA GetMailslotInfo SetThreadUILanguage SetConsoleTitleA SetVolumeMountPointA GetOEMCP GetProcessHandleCount CreateDirectoryExW LoadLibraryA GlobalFindAtomA GetTickCount GetLogicalDrives UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

74f4a9f80e94099b093c19c10402c2e74905796bf0168e842b65bd4c9cfaa15d

kernel32

user32