b990ed5485491482b2c8ee144a2fa5998aaa8fc5575b0ed740e85c40d750721b

General

Target
b990ed5485491482b2c8ee144a2fa5998aaa8fc5575b0ed740e85c40d750721b
Size 706KB
Sample221124-31x39agf79
SHA256 b990ed5485491482b2c8ee144a2fa5998aaa8fc5575b0ed740e85c40d750721b
MD5 3166a43363ca21ed7d3d5ebe4b13b11c
SHA1 7a32d8d9b9eddea5f9e2373046a017392ee1e437
SHA512 30203af4c2b6d26aa7dcbb6c02fd0e37d988c20770458d27f4f4cb45ec6ad86a0108b5bb4d1e8a5140aa4e45a8b652f902e062b5e846d9374a55f9d35c516746
SSDEEP 12288:ErvDTpeBV+vwiW3jvOnFbngFlH0dhPJWPazkalKmpsNmzszBN1iX11R:ETBeBwS3jOZgPUdhPCPalpssQzBN10nR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b990ed5485491482b2c8ee144a2fa5998aaa8fc5575b0ed740e85c40d750721b

.exe 706KB

b990ed5485491482b2c8ee144a2fa5998aaa8fc5575b0ed740e85c40d750721b

IMPHASH 2d129e25454562ff3cc878ef0dbc787a
SHA256 b990ed5485491482b2c8ee144a2fa5998aaa8fc5575b0ed740e85c40d750721b
MD5 3166a43363ca21ed7d3d5ebe4b13b11c
SHA1 7a32d8d9b9eddea5f9e2373046a017392ee1e437
SHA512 30203af4c2b6d26aa7dcbb6c02fd0e37d988c20770458d27f4f4cb45ec6ad86a0108b5bb4d1e8a5140aa4e45a8b652f902e062b5e846d9374a55f9d35c516746
SSDEEP 12288:ErvDTpeBV+vwiW3jvOnFbngFlH0dhPJWPazkalKmpsNmzszBN1iX11R:ETBeBwS3jOZgPUdhPCPalpssQzBN10nR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28630

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CopyFileExA ReadConsoleOutputCharacterA GetEnvironmentStrings FreeUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileW GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeW GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc WriteConsoleInputA TerminateThread GetCommandLineW FindFirstChangeNotificationA VerifyVersionInfoA DeleteTimerQueue FindFirstVolumeW GlobalFlags GetTickCount GetACP GlobalWire GetTapeParameters HeapWalk GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoA GetNamedPipeHandleStateW InterlockedDecrement SetCalendarInfoA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointA VirtualAlloc SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CreateFileA CloseHandle GetVolumeInformationA EnumSystemCodePagesA MoveFileWithProgressA LoadLibraryW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError DeleteFileA GetStartupInfoW HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo GetMessageExtraInfo GetListBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sharing

General

Malware Config

Signatures

File Explorer

b990ed5485491482b2c8ee144a2fa5998aaa8fc5575b0ed740e85c40d750721b

kernel32

user32

gdi32

advapi32