b8bc799288f9ae61652ccba8af096767d98c3d7f2818a56683b69bc37f6f4868

General

Target
b8bc799288f9ae61652ccba8af096767d98c3d7f2818a56683b69bc37f6f4868
Size 665KB
Sample221126-ac794age47
SHA256 b8bc799288f9ae61652ccba8af096767d98c3d7f2818a56683b69bc37f6f4868
MD5 4b9ad848d6dfd350fa55280cb64ee8c2
SHA1 9c879b588cccdaf4f49185b4922810db731486f5
SHA512 f326b777a72e858a297c4a06d4a04d306c20499b9e081f168b8fca3cb6931d38fd0cbc52bcdbc2353923765dda6e135c43b6cfe17ec2ca608a65428ca1f9e5b7
SSDEEP 12288:f16Cc7VD/BJJfrJqW9PUDGhnrTyK/wn6wKlBSlxrIi/5YOzWl01f6W6X:f4CcpJbfrl9NhnbvXl4vrIi1UW6X
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b8bc799288f9ae61652ccba8af096767d98c3d7f2818a56683b69bc37f6f4868

.exe 665KB

b8bc799288f9ae61652ccba8af096767d98c3d7f2818a56683b69bc37f6f4868

IMPHASH c9bb2d511f51a277e3f231434cb87b3a
SHA256 b8bc799288f9ae61652ccba8af096767d98c3d7f2818a56683b69bc37f6f4868
MD5 4b9ad848d6dfd350fa55280cb64ee8c2
SHA1 9c879b588cccdaf4f49185b4922810db731486f5
SHA512 f326b777a72e858a297c4a06d4a04d306c20499b9e081f168b8fca3cb6931d38fd0cbc52bcdbc2353923765dda6e135c43b6cfe17ec2ca608a65428ca1f9e5b7
SSDEEP 12288:f16Cc7VD/BJJfrJqW9PUDGhnrTyK/wn6wKlBSlxrIi/5YOzWl01f6W6X:f4CcpJbfrl9NhnbvXl4vrIi1UW6X
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15223

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings MapUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleW VirtualFree CreateDirectoryExA GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeA CreateMailslotW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue CopyFileW GetHandleInformation FindResourceA FormatMessageW FindFirstVolumeW GlobalFlags WritePrivateProfileStringW InterlockedDecrement GetTickCount GetACP GlobalWire GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA GetModuleHandleA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointA VirtualProtect SetConsoleActiveScreenBuffer GetCPInfo GetProcessIoCounters GlobalFindAtomA CloseHandle GetVolumeInformationA EnumSystemCodePagesA FindFirstChangeNotificationA LoadLibraryW HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetListBoxInfo

gdi32

GetCharABCWidthsA

advapi32

AbortSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

b8bc799288f9ae61652ccba8af096767d98c3d7f2818a56683b69bc37f6f4868

kernel32

user32

gdi32

advapi32