11859ac6d240345134750343f5fe305782c17042969e1ba1c9a8549fe79fc4aa

General

Target
11859ac6d240345134750343f5fe305782c17042969e1ba1c9a8549fe79fc4aa
Size 812KB
Sample221127-hrgppagd34
SHA256 11859ac6d240345134750343f5fe305782c17042969e1ba1c9a8549fe79fc4aa
MD5 ba830a883270f565998288ad71839fda
SHA1 c19d511d203fa59a6b04d67709372515971d2c5e
SHA512 e96f0e8f62d3b27840810c4f02944475bbb023c6b7d4b85652b7993b76a570e229ef3e0711a08d6e7f9189121966da21a8e6893fcadf091b0c88a6861fdd54bb
SSDEEP 12288:apTw5MQ0uV2SLu34h5Fck9qXHTljARLHxxbXJm8IPio4MDNTzHnFe1GxVyuiYJU:D0uDLu34/KPJABHDb50jPHHnMwriYJU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

11859ac6d240345134750343f5fe305782c17042969e1ba1c9a8549fe79fc4aa

.exe 812KB

11859ac6d240345134750343f5fe305782c17042969e1ba1c9a8549fe79fc4aa

IMPHASH 23ca9b22765af8fdc83ed3a3ed9b3831
SHA256 11859ac6d240345134750343f5fe305782c17042969e1ba1c9a8549fe79fc4aa
MD5 ba830a883270f565998288ad71839fda
SHA1 c19d511d203fa59a6b04d67709372515971d2c5e
SHA512 e96f0e8f62d3b27840810c4f02944475bbb023c6b7d4b85652b7993b76a570e229ef3e0711a08d6e7f9189121966da21a8e6893fcadf091b0c88a6861fdd54bb
SSDEEP 12288:apTw5MQ0uV2SLu34h5Fck9qXHTljARLHxxbXJm8IPio4MDNTzHnFe1GxVyuiYJU:D0uDLu34/KPJABHDb50jPHHnMwriYJU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

79154

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InitializeCriticalSection EnterCriticalSection LeaveCriticalSection VirtualProtect GetProcAddress VirtualAlloc GetCurrentThreadId CloseHandle WaitForSingleObject DeleteCriticalSection FreeLibrary GetModuleFileNameW GetTickCount CreateEventA Sleep SetEvent GetCurrentProcess DeleteFileW GetFullPathNameW CreateEventW GetLastError CopyFileW GetCurrentProcessId LoadLibraryA VirtualFree SizeofResource LoadResource GetModuleHandleA GetCommandLineW FindResourceW HeapFree ReadFile GetSystemTimeAsFileTime GetCommandLineA EncodePointer DecodePointer CreateThread ExitThread LoadLibraryExW HeapAlloc GetProcessHeap IsDebuggerPresent IsProcessorFeaturePresent SetFilePointer MultiByteToWideChar GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType InitializeCriticalSectionAndSpinCount GetStartupInfoW RtlUnwind SetLastError InterlockedIncrement InterlockedDecrement WriteFile WideCharToMultiByte GetConsoleCP ExitProcess GetModuleHandleExW AreFileApisANSI GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetStdHandle FlushFileBuffers CreateFileW WriteConsoleW OutputDebugStringW LoadLibraryW HeapReAlloc GetStringTypeW LCMapStringW SetEndOfFile HeapSize

advapi32

AccessCheck ClearEventLogA CryptContextAddRef

comctl32

CreatePropertySheetPageW ImageList_Read ImageList_SetBkColor

Sharing

General

Malware Config

Signatures

File Explorer

11859ac6d240345134750343f5fe305782c17042969e1ba1c9a8549fe79fc4aa

kernel32

advapi32

comctl32