a0e3395f389e3507dae0527fbaed1debb15160c5b3fd7564a29e22dc33f6221d

Sharing

Copy URL Twitter E-mail

General

Target
a0e3395f389e3507dae0527fbaed1debb15160c5b3fd7564a29e22dc33f6221d
Size 14KB
Sample221129-sy2zbacc67
SHA256 a0e3395f389e3507dae0527fbaed1debb15160c5b3fd7564a29e22dc33f6221d
MD5 078d661f3d0c8c5ee7e81bb6f2589c53
SHA1 4e736fe50fa132eaccd03f6c334568142bc12fc7
SHA512 4ce07b191d3c22bb44bc28cf0ff9b631ae52a6d06f5aae7cb8ccfb1b1f8f15753c2c92539e6a002e9a717bc1be03a124bda41d34a850d3a4d5d707b0664510f5
SSDEEP 384:IIzzSNmZcgnabKEPA4j1uQLHrgW2LkF/oJ4lK0P6N261AORS6d:IoGNmZhYKij1uygW2oF/hI0P6Q8T7d
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a0e3395f389e3507dae0527fbaed1debb15160c5b3fd7564a29e22dc33f6221d

.exe 14KB

a0e3395f389e3507dae0527fbaed1debb15160c5b3fd7564a29e22dc33f6221d

IMPHASH 9b5263d9f2b2c0452907e75d2ce221ad
SHA256 a0e3395f389e3507dae0527fbaed1debb15160c5b3fd7564a29e22dc33f6221d
MD5 078d661f3d0c8c5ee7e81bb6f2589c53
SHA1 4e736fe50fa132eaccd03f6c334568142bc12fc7
SHA512 4ce07b191d3c22bb44bc28cf0ff9b631ae52a6d06f5aae7cb8ccfb1b1f8f15753c2c92539e6a002e9a717bc1be03a124bda41d34a850d3a4d5d707b0664510f5
SSDEEP 384:IIzzSNmZcgnabKEPA4j1uQLHrgW2LkF/oJ4lK0P6N261AORS6d:IoGNmZhYKij1uygW2oF/hI0P6Q8T7d
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

7678

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Process32Next OpenProcess CreateRemoteThread GetVersion GetStartupInfoA GetCurrentThreadId WinExec CreateThread GetLocalTime GetCommandLineA SetUnhandledExceptionFilter CreateDirectoryA GetSystemDirectoryA MoveFileA SetFilePointer ReadFile GetLastError GetTempPathA lstrcatA DeleteFileA SetLastError lstrcpyA FreeLibrary FindResourceA LoadResource CreateFileA Sleep SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime SizeofResource lstrlenA GetCurrentProcess MultiByteToWideChar GetModuleHandleA ExitProcess GetWindowsDirectoryA Process32First lstrcmpiA CloseHandle LoadLibraryA GetProcAddress WaitForSingleObject

user32

PostQuitMessage DefWindowProcA DispatchMessageA TranslateMessage GetMessageA UpdateWindow ShowWindow wsprintfA CreateWindowExA RegisterClassExA LoadCursorA LoadIconA

advapi32

RegQueryValueExA InitializeSecurityDescriptor GetSecurityDescriptorDacl GetAclInformation GetLengthSid InitializeAcl GetAce EqualSid AddAccessAllowedAce SetSecurityDescriptorDacl SetFileSecurityA RegOpenKeyExA RegSaveKeyA RegCloseKey RegCreateKeyExA RegRestoreKeyA RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges OpenSCManagerA OpenServiceA CloseServiceHandle QueryServiceStatus ControlService LookupAccountNameA CreateServiceA StartServiceA ChangeServiceConfigA RegDeleteKeyA RegDeleteValueA GetFileSecurityA

msvcrt

_strrev _strnset _strcmpi _controlfp __set_app_type __p__fmode __p__commode ??2@YAPAXI@Z strtok memset memcpy strchr _except_handler3 __CxxFrameHandler strlen ??3@YAXPAX@Z strstr realloc malloc strcpy _strlwr strncmp strtoul isdigit ??1type_info@@UAE@XZ _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv

Name

.text

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.my_data

Size

112B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_data

Size

80B

Virtual Size

66B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_data

Size

32B

Virtual Size

19B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_data

Size

48B

Virtual Size

45B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_data

Size

256B

Virtual Size

249B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_data

Size

256B

Virtual Size

255B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_data

Size

128B

Virtual Size

125B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_data

Size

112B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

101KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ