675aa4876e42c450ef4ae165a09ec3f974015ecfe2792e5371ff0c8284adbdda

General

Target
675aa4876e42c450ef4ae165a09ec3f974015ecfe2792e5371ff0c8284adbdda
Size 139KB
Sample221130-ddhbvabc55
SHA256 675aa4876e42c450ef4ae165a09ec3f974015ecfe2792e5371ff0c8284adbdda
MD5 cd82fddae55914cf661054b59345d769
SHA1 2a05abf05add40cfe70a8d7f66363aefafdae947
SHA512 99d7746611bb4e3c1cbbcac63e5b85ed9256bfbf62bcc921d1480bb629141f96e4acac775c601737941fdefd4902f1ced62b2938d28cdc065f54fd36a6bc9197
SSDEEP 1536:Tpu47yLoY2/EBovlDSwmbr5yh9vk0tKzwdxcMC/0ZiHLiKKepf7GJF7kx7xSKk1b:dTmDeIr5avFtKIc2ZiHexe1Gwrk1w45
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

675aa4876e42c450ef4ae165a09ec3f974015ecfe2792e5371ff0c8284adbdda

.exe 139KB

675aa4876e42c450ef4ae165a09ec3f974015ecfe2792e5371ff0c8284adbdda

IMPHASH b22e139ef86229b4af9ccb7e649cb151
SHA256 675aa4876e42c450ef4ae165a09ec3f974015ecfe2792e5371ff0c8284adbdda
MD5 cd82fddae55914cf661054b59345d769
SHA1 2a05abf05add40cfe70a8d7f66363aefafdae947
SHA512 99d7746611bb4e3c1cbbcac63e5b85ed9256bfbf62bcc921d1480bb629141f96e4acac775c601737941fdefd4902f1ced62b2938d28cdc065f54fd36a6bc9197
SSDEEP 1536:Tpu47yLoY2/EBovlDSwmbr5yh9vk0tKzwdxcMC/0ZiHLiKKepf7GJF7kx7xSKk1b:dTmDeIr5avFtKIc2ZiHexe1Gwrk1w45
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19495

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasExesLengthA CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceW EnumCalendarInfoExA GetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileW SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExA SearchPathA MoveFileExW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA GetCPInfoExW WriteConsoleOutputA EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue GetHandleInformation FindResourceA GetModuleHandleW CreateJobObjectA FindFirstVolumeA GlobalFlags CreateNamedPipeW InterlockedIncrement CloseHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers GetLogicalDriveStringsW InterlockedExchangeAdd EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileW AddAtomA SetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread EnumResourceLanguagesW ClearCommBreak QueryMemoryResourceNotification GlobalFindAtomA HeapWalk SetFilePointer GetTickCount EnumSystemCodePagesW GetCommandLineA LoadLibraryW GetLastError WideCharToMultiByte HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA DeleteFileA

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

675aa4876e42c450ef4ae165a09ec3f974015ecfe2792e5371ff0c8284adbdda

kernel32

gdi32

winhttp