aaef58ede9edbfc0cbbdd3dc7abfa9ae0f977ed1b33af4f5d7665123187801d1

General

Target
aaef58ede9edbfc0cbbdd3dc7abfa9ae0f977ed1b33af4f5d7665123187801d1
Size 664KB
Sample221129-2d5zxadd82
SHA256 aaef58ede9edbfc0cbbdd3dc7abfa9ae0f977ed1b33af4f5d7665123187801d1
MD5 41001fdd7879ce9ede214e92c7e492be
SHA1 215964b0399da37b41b7f420806a72feb72a7c28
SHA512 1d125890b19e323fd3a67b3b2575c97df72f4f8b7f13d5e1d3e010063b88cc40a6f55d25513ada752992434f0b1d350152798381d43cb2ec591020c85eec44d9
SSDEEP 12288:Q2lMqUe8G9qSkYuZpeKF8GJF6y9NbgGUx0kXZPwtSRGG/t6i5l5kCYlS:Q2K98cT3d9V3U/XZPwYRGQ6i5l5k5l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

aaef58ede9edbfc0cbbdd3dc7abfa9ae0f977ed1b33af4f5d7665123187801d1

.exe 664KB

aaef58ede9edbfc0cbbdd3dc7abfa9ae0f977ed1b33af4f5d7665123187801d1

IMPHASH 2ac0f7085258eff31142b9f87cb0f218
SHA256 aaef58ede9edbfc0cbbdd3dc7abfa9ae0f977ed1b33af4f5d7665123187801d1
MD5 41001fdd7879ce9ede214e92c7e492be
SHA1 215964b0399da37b41b7f420806a72feb72a7c28
SHA512 1d125890b19e323fd3a67b3b2575c97df72f4f8b7f13d5e1d3e010063b88cc40a6f55d25513ada752992434f0b1d350152798381d43cb2ec591020c85eec44d9
SSDEEP 12288:Q2lMqUe8G9qSkYuZpeKF8GJF6y9NbgGUx0kXZPwtSRGG/t6i5l5kCYlS:Q2K98cT3d9V3U/XZPwYRGQ6i5l5k5l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19607

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasExesLengthA CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceW EnumCalendarInfoExA GetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileW SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExA SearchPathA MoveFileExW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA GetCPInfoExW WriteConsoleOutputA GetCommandLineA EnumDateFormatsW CancelTimerQueueTimer GetHandleInformation FindResourceA CreateJobObjectA FindFirstVolumeA GlobalFlags CreateNamedPipeW InterlockedIncrement CloseHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers GetLogicalDriveStringsW InterlockedCompareExchange EnumCalendarInfoW GetConsoleAliasExesLengthW InterlockedExchange GetNamedPipeHandleStateW GetModuleHandleW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileW AddAtomA SetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread EnumResourceLanguagesW ClearCommBreak QueryMemoryResourceNotification GlobalFindAtomA HeapWalk SetFilePointer GetTickCount EnumSystemCodePagesW VerifyVersionInfoA LoadLibraryW CreateFileA GetLastError WideCharToMultiByte HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize ReadFile

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

aaef58ede9edbfc0cbbdd3dc7abfa9ae0f977ed1b33af4f5d7665123187801d1

kernel32

gdi32

winhttp