b32195515f929a87455df26f49e617b9e778b8cb46933f0e30583d480d3c6988

General

Target
b32195515f929a87455df26f49e617b9e778b8cb46933f0e30583d480d3c6988
Size 669KB
Sample221127-lhf9cafe36
SHA256 b32195515f929a87455df26f49e617b9e778b8cb46933f0e30583d480d3c6988
MD5 eaa90d0307dc1ae0ecd3f56abd24b92b
SHA1 306ca9ce1a33f02e010f3db990f3bc75db330dbc
SHA512 2a1327c72e4335f086de2e843fe69599407c9a2f460f0f2c82070dce25d90f0a1f53a4156ad5dcbc9fcb825c6cf4c92726efecb24598c60cd232bf3d30d02225
SSDEEP 12288:KQOBZc/oP9DKJ02062BzFHf4nrmPhbSV27AVpdXsHbjQSdaAM7ebv+QCRCU90N:k2SMJw6lohn7Ud8kSdaAM7ebvBCRP6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b32195515f929a87455df26f49e617b9e778b8cb46933f0e30583d480d3c6988

.exe 669KB

b32195515f929a87455df26f49e617b9e778b8cb46933f0e30583d480d3c6988

IMPHASH ec7b3dbd80b40e9b023e18c70dc965d7
SHA256 b32195515f929a87455df26f49e617b9e778b8cb46933f0e30583d480d3c6988
MD5 eaa90d0307dc1ae0ecd3f56abd24b92b
SHA1 306ca9ce1a33f02e010f3db990f3bc75db330dbc
SHA512 2a1327c72e4335f086de2e843fe69599407c9a2f460f0f2c82070dce25d90f0a1f53a4156ad5dcbc9fcb825c6cf4c92726efecb24598c60cd232bf3d30d02225
SSDEEP 12288:KQOBZc/oP9DKJ02062BzFHf4nrmPhbSV27AVpdXsHbjQSdaAM7ebv+QCRCU90N:k2SMJw6lohn7Ud8kSdaAM7ebvBCRP6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20231

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsW OpenMutexW GetConsoleAliasExesLengthA CopyFileExW ReadConsoleOutputCharacterW GetEnvironmentStrings GetCommConfig QueryDosDeviceA EnumCalendarInfoExA GetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileA SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalHandle CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA RequestWakeupLatency CallNamedPipeA GetCurrentDirectoryW GetDriveTypeW CreateMailslotW BuildCommDCBAndTimeoutsW GetProcAddress LoadLibraryA LocalAlloc MoveFileWithProgressW GetBinaryTypeA TerminateProcess WriteConsoleOutputA GetCommandLineW FindFirstChangeNotificationW EnumSystemCodePagesA CancelTimerQueueTimer SearchPathW CopyFileA GetHandleInformation FindResourceA GetModuleHandleW CreateJobObjectW FindFirstVolumeW GlobalFlags CreateNamedPipeW LocalUnlock InterlockedIncrement CloseHandle GetTickCount GetShortPathNameA DeviceIoControl HeapLock GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateA GenerateConsoleCtrlEvent MoveFileW AddAtomW WriteConsoleInputW FreeEnvironmentStringsW SetConsoleTitleA SetVolumeMountPointW VirtualProtect _hread ClearCommBreak SetProcessPriorityBoost GlobalFindAtomA GetVolumeInformationA VerifyVersionInfoA LoadLibraryW ReadFile WriteConsoleW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

CharUpperBuffA GetComboBoxInfo GetMenuInfo

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

b32195515f929a87455df26f49e617b9e778b8cb46933f0e30583d480d3c6988

kernel32

user32

gdi32

winhttp