2de677c2ed2fe1e2ae3410582198f74119f24a512fac7768156cb9dfdbeb3cab

Sharing

Copy URL Twitter E-mail

General

Target
2de677c2ed2fe1e2ae3410582198f74119f24a512fac7768156cb9dfdbeb3cab
Size 571KB
Sample221127-c5jtbagg9y
SHA256 2de677c2ed2fe1e2ae3410582198f74119f24a512fac7768156cb9dfdbeb3cab
MD5 ddc2bdd1851d6d064f63d17ee5b19e2c
SHA1 c18f6b3b04bd8f4e721f6bc81ccf6d6a697cad14
SHA512 08fb95e78b12441035a8aef283d220e41da8f78e7fde9c375ab32a18821915decfccb20a53757cc4840de083fdc70540a22bc1e2894090958cee6a0119dc2fd6
SSDEEP 12288:8JYWSbl0beVWj/6//wL0d/lTNR1RDPm+iMrYYdJ16DPR+xUUbEr:8iObYW2//i0bNR1Q+iEXcZqUr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2de677c2ed2fe1e2ae3410582198f74119f24a512fac7768156cb9dfdbeb3cab

.exe 571KB

2de677c2ed2fe1e2ae3410582198f74119f24a512fac7768156cb9dfdbeb3cab

IMPHASH 70c33bd85042d57d5d5d821f15defb43
SHA256 2de677c2ed2fe1e2ae3410582198f74119f24a512fac7768156cb9dfdbeb3cab
MD5 ddc2bdd1851d6d064f63d17ee5b19e2c
SHA1 c18f6b3b04bd8f4e721f6bc81ccf6d6a697cad14
SHA512 08fb95e78b12441035a8aef283d220e41da8f78e7fde9c375ab32a18821915decfccb20a53757cc4840de083fdc70540a22bc1e2894090958cee6a0119dc2fd6
SSDEEP 12288:8JYWSbl0beVWj/6//wL0d/lTNR1RDPm+iMrYYdJ16DPR+xUUbEr:8iObYW2//i0bNR1Q+iEXcZqUr
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4356

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

shell32

ShellExecuteW ShellExecuteA SHGetFolderPathAndSubDirA

kernel32

CloseHandle CopyFileA CreateEventA CreateFileA CreateFileMappingA CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection ExitProcess FindResourceA GetACP GetCPInfo GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetEnvironmentStrings GetExitCodeThread GetFileAttributesA GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetTempPathA GetTickCount GetUserDefaultLCID GetVersion GetVersionExA HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LoadResource LocalAlloc LocalFree LockResource MapViewOfFile MultiByteToWideChar OpenFileMappingA RaiseException ReadFile RtlUnwind SetConsoleCtrlHandler SetEvent SetFilePointer SetFileTime SetHandleCount SetLastError SetThreadLocale SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

comctl32

InitCommonControlsEx

user32

CreateDialogParamA DestroyIcon DispatchMessageA EnumThreadWindows GetDlgItem GetMessageA IsDialogMessageA LoadIconA MessageBoxA PostMessageA PostQuitMessage SendDlgItemMessageA SendMessageA SetDlgItemTextA SetWindowTextA ShowWindow TranslateMessage UpdateWindow wsprintfA wsprintfW

Name

.text

Size

157KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

32KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

368KB

Virtual Size

368KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ