ee1d1018f825ffa2d507f0d58a3a2c9d14a2b4a9c351e7d3fa05d29063488b9e

Target
ee1d1018f825ffa2d507f0d58a3a2c9d14a2b4a9c351e7d3fa05d29063488b9e
Size 146KB
Sample221130-rms2lagf28
SHA256 ee1d1018f825ffa2d507f0d58a3a2c9d14a2b4a9c351e7d3fa05d29063488b9e
MD5 2c6e6e290972fcd5e556efccfd51f174
SHA1 ec3de0785e4ccd0282e92e35c915ddb72832fd83
SHA512 a7077bf87ad233413322dd55d4c1ed684d5ebd70e9451307d9f70ba1888688fa5b375a6006803da9e9cc800be7bc928230ad26a889e88c907854a8bc73ad539f
SSDEEP 1536:KQsw8LQ+Z9DjjSD60zzeE2G95Vz6B6yRTj9AU44YxSs2gdIuV8Vm3PkO0v0RDQBK:KjiSd/LHG9516B6cv44WdX80/VDmGp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ee1d1018f825ffa2d507f0d58a3a2c9d14a2b4a9c351e7d3fa05d29063488b9e

.exe 146KB

ee1d1018f825ffa2d507f0d58a3a2c9d14a2b4a9c351e7d3fa05d29063488b9e

IMPHASH 9623159023749d6f1021b391ad2cd51a
SHA256 ee1d1018f825ffa2d507f0d58a3a2c9d14a2b4a9c351e7d3fa05d29063488b9e
MD5 2c6e6e290972fcd5e556efccfd51f174
SHA1 ec3de0785e4ccd0282e92e35c915ddb72832fd83
SHA512 a7077bf87ad233413322dd55d4c1ed684d5ebd70e9451307d9f70ba1888688fa5b375a6006803da9e9cc800be7bc928230ad26a889e88c907854a8bc73ad539f
SSDEEP 1536:KQsw8LQ+Z9DjjSD60zzeE2G95Vz6B6yRTj9AU44YxSs2gdIuV8Vm3PkO0v0RDQBK:KjiSd/LHG9516B6cv44WdX80/VDmGp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20327

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthA CopyFileExA ReadConsoleOutputCharacterW FillConsoleOutputAttribute GetCommConfig QueryDosDeviceW EnumCalendarInfoExA GetProcessPriorityBoost CreateJobSet AddConsoleAliasW CreateFileW SetMailslotInfo GetWindowsDirectoryW GetModuleHandleA GlobalHandle CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW OpenWaitableTimerW GetVersionExA SearchPathA MoveFileExW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA LocalAlloc GetBinaryTypeA GetCPInfoExW WriteConsoleOutputA GetCommandLineW EnumSystemCodePagesW CancelTimerQueueTimer GetHandleInformation FindResourceA CreateJobObjectA FindFirstVolumeA GlobalFlags CreateNamedPipeW LocalUnlock InterlockedIncrement CloseHandle GetTickCount GetShortPathNameA DeviceIoControl GetLogicalDriveStringsW GetConsoleTitleA InterlockedCompareExchange EnumCalendarInfoA InterlockedExchange GetNamedPipeHandleStateW GetModuleHandleW DeactivateActCtx GenerateConsoleCtrlEvent MoveFileW AddAtomA SetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW VirtualProtect _hread ClearCommBreak QueryMemoryResourceNotification GlobalFindAtomW GetMailslotInfo HeapWalk SetFilePointer GetVolumeInformationA LoadLibraryW VerifyVersionInfoA GetLastError WideCharToMultiByte HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize ReadFile CreateFileA

gdi32

GetCharABCWidthsA GetCharWidthA

winhttp

WinHttpWriteData