b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93

General

Target
b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93
Size 155KB
Sample221116-ydlpgscf62
SHA256 044ae6880c387cfb07a131fd30ddab0afc94f381eb98289a88501766c4fa24e8
MD5 3ff3eef91269280607353df6e28f825d
SHA1 4f15559ea2113cf92362e70926ee4885c06c6d43
SHA512 e0efa363edbbec715da3095cba53968d575fc1cda5bd8385b1039a7b33580d465a7b16a99bfddb4e082d03a44b258052f196762783134faf854f20b4f1165ad3
SSDEEP 3072:qGThxwaJTZ8cKnD+5FDLHb5ORN2pJQs41f4VpKRCOvki5q:xhhI6fb4v2pJQR1fgp/Skgq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93

.zip 155KB
b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93

.exe 232KB

b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93

SHA256 044ae6880c387cfb07a131fd30ddab0afc94f381eb98289a88501766c4fa24e8
MD5 3ff3eef91269280607353df6e28f825d
SHA1 4f15559ea2113cf92362e70926ee4885c06c6d43
SHA512 e0efa363edbbec715da3095cba53968d575fc1cda5bd8385b1039a7b33580d465a7b16a99bfddb4e082d03a44b258052f196762783134faf854f20b4f1165ad3
SSDEEP 3072:qGThxwaJTZ8cKnD+5FDLHb5ORN2pJQs41f4VpKRCOvki5q:xhhI6fb4v2pJQR1fgp/Skgq
MD5 SHA1 SHA512 SSDEEP

b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93

IMPHASH 89e7552a7bf49c6b2882e1ebfa72cd34
SHA256 b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93
MD5 7960146c3ce0103f7c63f99952955c3c
SHA1 e9f98268f7c481e44181fd16a552dedce30d6cee
SHA512 440e6ffa38531d69dcce553ca9dc8834f863b5f64dcaa27437ac719bbc89de62f3dcbab04eb40ef35de5515c0f80f898888c18695ccb7c4625ba80bbff56cda7
SSDEEP 3072:dXOIZCL4NWfzzaaquRshHb2cfUqH2CMb5x7LYgWF3Cn5JN19BRLhdeQnpR:ZjCL4CaaXsB2csuPF3iJNvDLhoMp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26847

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetStringTypeA WaitNamedPipeA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount SetCommState GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW GetFileAttributesA GetFileAttributesW WriteConsoleW GetConsoleAliasesW SetProcessAffinityMask GetProcAddress VirtualAlloc CopyFileA LoadLibraryA GetProcessWorkingSetSize LocalAlloc OpenJobObjectW GetModuleHandleA CreateMutexA FindNextFileW AddConsoleAliasA GlobalReAlloc SetFileAttributesW LCMapStringW GetLastError GetSystemDefaultLangID Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CreateFileA LCMapStringA MultiByteToWideChar GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile RaiseException

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93

b5cf5f35bf7ea527aab286cf4f24afc32d7d874b2ee752908bbc7d34bf049d93

kernel32

advapi32