579129cb459bc9c4f7f10c0b3904ba5ef89b92640788e736a45da96ec249c1dd

General

Target
579129cb459bc9c4f7f10c0b3904ba5ef89b92640788e736a45da96ec249c1dd
Size 823KB
Sample221119-wl3xmade96
SHA256 579129cb459bc9c4f7f10c0b3904ba5ef89b92640788e736a45da96ec249c1dd
MD5 cd3516fa3410082d9ac362cdb39d9993
SHA1 c187f84e94a4987f3e6802a04b87c70897218838
SHA512 98312b48fcdfa50765f74443afea0f0bb9c5b89c5ee01c2f025acbf2cb00c3758cb6af499c02a9677363db0cc75d8e8d881348989772f7cc061953ca6985c644
SSDEEP 24576:TNZMUI18EBwU4a/xe9jw3uwwXoeJWbvrz:0SEkyD3u15JWPz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

579129cb459bc9c4f7f10c0b3904ba5ef89b92640788e736a45da96ec249c1dd

.exe 823KB

579129cb459bc9c4f7f10c0b3904ba5ef89b92640788e736a45da96ec249c1dd

IMPHASH 3a28fc6cbd66b78dccc28e56534d2c76
SHA256 579129cb459bc9c4f7f10c0b3904ba5ef89b92640788e736a45da96ec249c1dd
MD5 cd3516fa3410082d9ac362cdb39d9993
SHA1 c187f84e94a4987f3e6802a04b87c70897218838
SHA512 98312b48fcdfa50765f74443afea0f0bb9c5b89c5ee01c2f025acbf2cb00c3758cb6af499c02a9677363db0cc75d8e8d881348989772f7cc061953ca6985c644
SSDEEP 24576:TNZMUI18EBwU4a/xe9jw3uwwXoeJWbvrz:0SEkyD3u15JWPz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SetProcessAffinityMask WriteConsoleOutputCharacterA OpenJobObjectA GetCommState AddConsoleAliasW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW LoadLibraryW CopyFileW GetFileAttributesA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW GetVolumePathNameA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc RemoveDirectoryA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW GetModuleHandleA CreateMutexA FindNextFileW GetStringTypeW GetFileAttributesExW SetFileShortNameA GetVolumeNameForVolumeMountPointW LCMapStringW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetConsoleCP GetConsoleMode HeapReAlloc SetStdHandle LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA FlushFileBuffers GetConsoleOutputCP CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

579129cb459bc9c4f7f10c0b3904ba5ef89b92640788e736a45da96ec249c1dd

kernel32