b348352d17892daa2b09be7e8e62df0718c6b81e0e74d2fdb9e86f0fb422dbf7

General

Target
b348352d17892daa2b09be7e8e62df0718c6b81e0e74d2fdb9e86f0fb422dbf7
Size 815KB
Sample221122-j5qeesfb57
SHA256 b348352d17892daa2b09be7e8e62df0718c6b81e0e74d2fdb9e86f0fb422dbf7
MD5 6ff954f962904d39372e022f0e5fcf20
SHA1 33fbba3e515e5dbc34183f9a8e7a543aa7f0622d
SHA512 0db46f234f0c04ce04671b630ac192b136878569436ba55a391885b7c0fb1ec9e220d9fd72f7ed7ecf731b51097586ca5b996e5edc8b4604af79c75a20c31a69
SSDEEP 12288:8LHX5/Oo6YnYQp0JoyscrycW4YSSze6YcKBPhVkDQzexjpHfhYO2Aq6zc8wG:8LhOCnY7sWyXxD5KhhKQ4ZhY8q6zc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b348352d17892daa2b09be7e8e62df0718c6b81e0e74d2fdb9e86f0fb422dbf7

.exe 815KB

b348352d17892daa2b09be7e8e62df0718c6b81e0e74d2fdb9e86f0fb422dbf7

IMPHASH 615e8c141f6e759edad626c5b6c2cfda
SHA256 b348352d17892daa2b09be7e8e62df0718c6b81e0e74d2fdb9e86f0fb422dbf7
MD5 6ff954f962904d39372e022f0e5fcf20
SHA1 33fbba3e515e5dbc34183f9a8e7a543aa7f0622d
SHA512 0db46f234f0c04ce04671b630ac192b136878569436ba55a391885b7c0fb1ec9e220d9fd72f7ed7ecf731b51097586ca5b996e5edc8b4604af79c75a20c31a69
SSDEEP 12288:8LHX5/Oo6YnYQp0JoyscrycW4YSSze6YcKBPhVkDQzexjpHfhYO2Aq6zc8wG:8LhOCnY7sWyXxD5KhhKQ4ZhY8q6zc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24464

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesW WriteConsoleW GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetComputerNameA SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW OpenJobObjectW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA LCMapStringW GetLastError GetVolumeNameForVolumeMountPointA Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing

General

Malware Config

Signatures

File Explorer

b348352d17892daa2b09be7e8e62df0718c6b81e0e74d2fdb9e86f0fb422dbf7

kernel32

gdi32

ole32