2011c50fc2a0e421153580345bc8e4246c4eb364fd904be3e3486a4ed1699270

General

Target
2011c50fc2a0e421153580345bc8e4246c4eb364fd904be3e3486a4ed1699270
Size 139KB
Sample221130-jww6lsbf77
SHA256 2011c50fc2a0e421153580345bc8e4246c4eb364fd904be3e3486a4ed1699270
MD5 ded115c814c6c7ab3e370cfcd1a185d0
SHA1 16fbc7d9774fdd54792bf411c1ad69cf750935de
SHA512 ce4170240870490240be4d7b318b8883eb1328f8459286bfc1c04845a55766ffab1e92cb08a5036ccd37eb5a960360ea807b86ffdc7fe01b6da21af6d3af4f5d
SSDEEP 3072:Q1CM9FlAIP5uxB07qHdwgLGRmdIAPIZS1:9MP6xB0atqR4LPII
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2011c50fc2a0e421153580345bc8e4246c4eb364fd904be3e3486a4ed1699270

.exe 139KB

2011c50fc2a0e421153580345bc8e4246c4eb364fd904be3e3486a4ed1699270

IMPHASH 088bf11be46f04cefa142e089220e04e
SHA256 2011c50fc2a0e421153580345bc8e4246c4eb364fd904be3e3486a4ed1699270
MD5 ded115c814c6c7ab3e370cfcd1a185d0
SHA1 16fbc7d9774fdd54792bf411c1ad69cf750935de
SHA512 ce4170240870490240be4d7b318b8883eb1328f8459286bfc1c04845a55766ffab1e92cb08a5036ccd37eb5a960360ea807b86ffdc7fe01b6da21af6d3af4f5d
SSDEEP 3072:Q1CM9FlAIP5uxB07qHdwgLGRmdIAPIZS1:9MP6xB0atqR4LPII
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19591

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetConsoleAliasExesLengthA CopyFileExA ReadConsoleOutputCharacterW CompareStringW SetVolumeLabelA FillConsoleOutputAttribute GetConsoleTitleA QueryDosDeviceW EnumCalendarInfoExA GetProcessPriorityBoost IsProcessInJob AddConsoleAliasW CreateFileW SetComputerNameW GetWindowsDirectoryW GetModuleHandleA GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW OpenWaitableTimerA GetVersionExA SearchPathA MoveFileExW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA GetCPInfoExW WriteConsoleOutputA EnumDateFormatsW VerifyVersionInfoA DeleteTimerQueue GetHandleInformation FormatMessageW GetModuleHandleW CreateJobObjectA FindFirstVolumeA GlobalFlags CreateNamedPipeW InterlockedIncrement CloseHandle CopyFileW GetComputerNameExA GetShortPathNameA FlushFileBuffers GetLogicalDriveStringsW InterlockedExchangeAdd EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW GetCurrentActCtx GenerateConsoleCtrlEvent MoveFileW AddAtomA SetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW VirtualAlloc _hread ClearCommBreak GetStringTypeExW GlobalFindAtomA SetMailslotInfo HeapWalk TransactNamedPipe GetTickCount EnumSystemCodePagesW GetCommandLineA LoadLibraryW GetLastError WideCharToMultiByte HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA DeleteFileA

gdi32

GetCharWidthA GetCharABCWidthsA

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

2011c50fc2a0e421153580345bc8e4246c4eb364fd904be3e3486a4ed1699270

kernel32

gdi32

winhttp