81fc3c1d4bc5f34fe5620e98e9a16611955e412165ac6ae122fa41d1816184ca

General

Target
81fc3c1d4bc5f34fe5620e98e9a16611955e412165ac6ae122fa41d1816184ca
Size 802KB
Sample221122-swagaagg38
SHA256 81fc3c1d4bc5f34fe5620e98e9a16611955e412165ac6ae122fa41d1816184ca
MD5 2fa9ba0a3450613283ede851f4fc435f
SHA1 f5c0694ff42e8f3ab4e6ffe065463a89b9e90a8d
SHA512 ec40577b79299e54c4c609a15649be07789ec28914d4c308b7f91e6937dbb2fda5c3b4180f493a6b6e8b8d2b56d8ec7a111d4ace39e54611eb3dba8f53509903
SSDEEP 24576:54Jt1qDbPHq31WdI0YLFDaGOCIVl22ZV:54Nyj21YFAFD+Vlf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

81fc3c1d4bc5f34fe5620e98e9a16611955e412165ac6ae122fa41d1816184ca

.exe 802KB

81fc3c1d4bc5f34fe5620e98e9a16611955e412165ac6ae122fa41d1816184ca

IMPHASH d1fdad2dc5f908d72d0d8cc535fc9d07
SHA256 81fc3c1d4bc5f34fe5620e98e9a16611955e412165ac6ae122fa41d1816184ca
MD5 2fa9ba0a3450613283ede851f4fc435f
SHA1 f5c0694ff42e8f3ab4e6ffe065463a89b9e90a8d
SHA512 ec40577b79299e54c4c609a15649be07789ec28914d4c308b7f91e6937dbb2fda5c3b4180f493a6b6e8b8d2b56d8ec7a111d4ace39e54611eb3dba8f53509903
SSDEEP 24576:54Jt1qDbPHq31WdI0YLFDaGOCIVl22ZV:54Nyj21YFAFD+Vlf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23840

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW WriteConsoleOutputCharacterA OpenJobObjectA GetCommState ReadConsoleA GetUserDefaultLCID CreateHardLinkA GetFileAttributesExA GetModuleHandleW GetTickCount GetConsoleAliasesA WaitNamedPipeW InitializeCriticalSection LoadLibraryW CopyFileW GetFileAttributesA GetFileAttributesW WriteConsoleW GetVolumePathNameA FillConsoleOutputCharacterA GetConsoleAliasesW FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW WriteConsoleA GetProcessWorkingSetSize LocalAlloc RemoveDirectoryW GetModuleHandleA FindFirstChangeNotificationA FindNextFileW GetStringTypeW SetFileShortNameA GetVolumeNameForVolumeMountPointW AddConsoleAliasA LCMapStringA GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

ole32

CoRevokeMallocSpy

Sharing

General

Malware Config

Signatures

File Explorer

81fc3c1d4bc5f34fe5620e98e9a16611955e412165ac6ae122fa41d1816184ca

kernel32

gdi32

ole32