2a5c41fdf30d170d018f746e1e72bb1c4adb6528c7efc3a880ee5e63788acd58

Sharing

Copy URL Twitter E-mail

General

Target
2a5c41fdf30d170d018f746e1e72bb1c4adb6528c7efc3a880ee5e63788acd58
Size 646KB
Sample221201-gs7f3aee8v
SHA256 2a5c41fdf30d170d018f746e1e72bb1c4adb6528c7efc3a880ee5e63788acd58
MD5 27c41ef3a6904594f4e143a43eb12220
SHA1 4a985397d5b93550640f55215d8c802a5740e393
SHA512 3edc6cfb87a023e1cb034c394ea3cec7d01a02bcce53826dc6ec801b5d10561fd1e7e4f15d667f27a8822dbc3c60b6c49618c788744908903800f96f3e0a8892
SSDEEP 12288:fnvoN4gKfKr/xJTgXfx+Q65gTY11IN8S/804mVpCLuXrTi/Fwc/O5z:fv24MrZJgXfwZCWSb7C0XiScG5z
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2a5c41fdf30d170d018f746e1e72bb1c4adb6528c7efc3a880ee5e63788acd58

.exe 646KB

2a5c41fdf30d170d018f746e1e72bb1c4adb6528c7efc3a880ee5e63788acd58

IMPHASH 6afebdd53856cadeea9fcb71e7910efa
SHA256 2a5c41fdf30d170d018f746e1e72bb1c4adb6528c7efc3a880ee5e63788acd58
MD5 27c41ef3a6904594f4e143a43eb12220
SHA1 4a985397d5b93550640f55215d8c802a5740e393
SHA512 3edc6cfb87a023e1cb034c394ea3cec7d01a02bcce53826dc6ec801b5d10561fd1e7e4f15d667f27a8822dbc3c60b6c49618c788744908903800f96f3e0a8892
SSDEEP 12288:fnvoN4gKfKr/xJTgXfx+Q65gTY11IN8S/804mVpCLuXrTi/Fwc/O5z:fv24MrZJgXfwZCWSb7C0XiScG5z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE

PDB paths

crypt32

CryptBinaryToStringW

ole32

CoCreateGuid CoInitialize CoUninitialize

kernel32

CloseHandle CreateFileA DeleteFileW EnterCriticalSection GetCommandLineA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetLocaleInfoA GetModuleHandleA GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount GetVersionExA InitializeCriticalSection LeaveCriticalSection LoadLibraryA MultiByteToWideChar QueryPerformanceCounter SetUnhandledExceptionFilter TerminateProcess UnhandledExceptionFilter VirtualProtect lstrlenA DeleteCriticalSection

ntdll

NtOpenKey RtlAllocateHeap RtlDosPathNameToNtPathName_U RtlFreeHeap RtlFreeUnicodeString RtlInitUnicodeString NtClose

gdi32

BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectA CreateSolidBrush DeleteDC DeleteObject ExtTextOutA GetDeviceCaps GetStockObject GetTextExtentPoint32A SelectObject SetBkColor SetBkMode SetTextColor GetObjectA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

user32

BeginPaint CharNextA CreateWindowExA DefWindowProcA DestroyWindow DispatchMessageA EnableWindow EndPaint FillRect GetClientRect GetDC GetFocus GetSystemMetrics GetWindowLongA GetWindowRect InvalidateRect KillTimer LoadCursorA LoadStringA MessageBoxA PostMessageA PostQuitMessage ReleaseDC SendMessageA SetCursor SetTimer SetWindowLongA SetWindowPos ShowWindow SystemParametersInfoA TranslateMessage UpdateWindow

Name

AUTO

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DGROUP

Size

125KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

220B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc2

Size

215B

Virtual Size

215B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc3

Size

344B

Virtual Size

344B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE