b1f32a8da8e23b96d88526bb8e0aa37299cc179df57a0a79913db142441330be

General

Target
b1f32a8da8e23b96d88526bb8e0aa37299cc179df57a0a79913db142441330be
Size 147KB
Sample221126-ry24mseb2t
SHA256 b1f32a8da8e23b96d88526bb8e0aa37299cc179df57a0a79913db142441330be
MD5 2def2740fc6adac032e5863444f66f18
SHA1 7acbae25093f1e6bb2515593b0338ce77e335a2b
SHA512 118a71dc5c2df478896b4530e5d827288a1224eca354adc8b2f182e9712ebf1eeb2f3961d8e045fc40b5e44da2a62101f639921f08af07f0f43055cbb8150d69
SSDEEP 3072:GAo9UxGC9n5C0r141iI+SsDGT1Gms0rd:kEGC20r141iItSG5t
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b1f32a8da8e23b96d88526bb8e0aa37299cc179df57a0a79913db142441330be

.exe 147KB

b1f32a8da8e23b96d88526bb8e0aa37299cc179df57a0a79913db142441330be

IMPHASH 9fd3a4eaa1935ebfdb4bd4cad72d3d8d
SHA256 b1f32a8da8e23b96d88526bb8e0aa37299cc179df57a0a79913db142441330be
MD5 2def2740fc6adac032e5863444f66f18
SHA1 7acbae25093f1e6bb2515593b0338ce77e335a2b
SHA512 118a71dc5c2df478896b4530e5d827288a1224eca354adc8b2f182e9712ebf1eeb2f3961d8e045fc40b5e44da2a62101f639921f08af07f0f43055cbb8150d69
SSDEEP 3072:GAo9UxGC9n5C0r141iI+SsDGT1Gms0rd:kEGC20r141iItSG5t
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15543

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExW ReadConsoleOutputCharacterA GetEnvironmentStrings MapUserPhysicalPages QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost LocalSize AddConsoleAliasW CreateFileA GetMailslotInfo GetWindowsDirectoryA GetModuleHandleA VirtualFree CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExW SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateThread WriteConsoleOutputA GetCommandLineW EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue CopyFileW GetHandleInformation FindResourceA CreateJobObjectW FindFirstVolumeW GlobalFlags WritePrivateProfileStringW InterlockedDecrement GetModuleHandleW GetTickCount VerSetConditionMask GlobalWire GetTapeParameters HeapLock GetConsoleTitleW InterlockedExchangeAdd EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateA TerminateProcess MoveFileA AddAtomW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect SetConsoleActiveScreenBuffer ClearCommBreak GetProcessIoCounters GlobalFindAtomA CloseHandle GetVolumeInformationA EnumSystemCodePagesA FindFirstChangeNotificationA LoadLibraryW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile

user32

GetComboBoxInfo CharUpperBuffA GetMenuInfo

gdi32

GetCharABCWidthsA

advapi32

AbortSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

b1f32a8da8e23b96d88526bb8e0aa37299cc179df57a0a79913db142441330be

kernel32

user32

gdi32

advapi32