f4c55b7c0ded86c1ca7e58d81500f9911b828369ba15322e2652ff65b35710ed

General

Target
f4c55b7c0ded86c1ca7e58d81500f9911b828369ba15322e2652ff65b35710ed
Size 731KB
Sample221116-txbamsca68
SHA256 f4c55b7c0ded86c1ca7e58d81500f9911b828369ba15322e2652ff65b35710ed
MD5 26bc838e4d36c0d4f7c8e45458670276
SHA1 ea289be9fbd1f6252caa58f7e41dc0ed4f4a3ea3
SHA512 a16079872506ea41e6025f7e07a1638c5eb48966499b262ac86846c5688ccddbebe0b013be040da3738143d4a5537145cae68bbcccfcd10d03c66f131e30cbd7
SSDEEP 12288:Tc5iEt79ehM7o93RiE7sxq0dV3ALBGe2PKfo8jsVjr:TOft79ehSKP4fwLZi3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f4c55b7c0ded86c1ca7e58d81500f9911b828369ba15322e2652ff65b35710ed

.exe 731KB

f4c55b7c0ded86c1ca7e58d81500f9911b828369ba15322e2652ff65b35710ed

IMPHASH 9d3c46448655d82ee7e7b980d48b2aab
SHA256 f4c55b7c0ded86c1ca7e58d81500f9911b828369ba15322e2652ff65b35710ed
MD5 26bc838e4d36c0d4f7c8e45458670276
SHA1 ea289be9fbd1f6252caa58f7e41dc0ed4f4a3ea3
SHA512 a16079872506ea41e6025f7e07a1638c5eb48966499b262ac86846c5688ccddbebe0b013be040da3738143d4a5537145cae68bbcccfcd10d03c66f131e30cbd7
SSDEEP 12288:Tc5iEt79ehM7o93RiE7sxq0dV3ALBGe2PKfo8jsVjr:TOft79ehSKP4fwLZi3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27626

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW lstrlenW GetConsoleAliasesW SetProcessAffinityMask GetProcAddress VirtualAlloc CopyFileA LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetLastError GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

f4c55b7c0ded86c1ca7e58d81500f9911b828369ba15322e2652ff65b35710ed

kernel32

advapi32