e5040c2da791a21d54365c5d2dfabd006d402be3d4f3558f480b92ec52808b3e

General

Target
e5040c2da791a21d54365c5d2dfabd006d402be3d4f3558f480b92ec52808b3e
Size 185KB
Sample221201-tt7vfaag6v
SHA256 e5040c2da791a21d54365c5d2dfabd006d402be3d4f3558f480b92ec52808b3e
MD5 3326681ef0261f9d4ae5251d0c0c3c6b
SHA1 dfa84a5e0a108a6194d97d987697cbb4c6facaad
SHA512 acac79d3a9815ff81994dfd28313038141b02e669d401d3872ecd85ce0249fab46a76446e294ba87bd2c146d414e2e45b92c983eb65be9555b30ffca2c5933a2
SSDEEP 3072:ooWkeqgayz3oIDC5Fd2Pr0qPrgCFGIyU1xdJc8PrGDAbEa/wt:byz3oI7MCFGIdR3Ea/w
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e5040c2da791a21d54365c5d2dfabd006d402be3d4f3558f480b92ec52808b3e

.exe 185KB

e5040c2da791a21d54365c5d2dfabd006d402be3d4f3558f480b92ec52808b3e

IMPHASH 295af0e0fa74ab5918acf17451b32a88
SHA256 e5040c2da791a21d54365c5d2dfabd006d402be3d4f3558f480b92ec52808b3e
MD5 3326681ef0261f9d4ae5251d0c0c3c6b
SHA1 dfa84a5e0a108a6194d97d987697cbb4c6facaad
SHA512 acac79d3a9815ff81994dfd28313038141b02e669d401d3872ecd85ce0249fab46a76446e294ba87bd2c146d414e2e45b92c983eb65be9555b30ffca2c5933a2
SSDEEP 3072:ooWkeqgayz3oIDC5Fd2Pr0qPrgCFGIyU1xdJc8PrGDAbEa/wt:byz3oI7MCFGIdR3Ea/w
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18375

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute EnumDateFormatsW FindFirstVolumeA GlobalFlags LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd EnumDateFormatsA GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedIncrement InterlockedExchange GetNamedPipeHandleStateW DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW SetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA _hread ClearCommBreak lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk TransactNamedPipe EnumSystemCodePagesW GetConsoleFontSize LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing

General

Malware Config

Signatures

File Explorer

e5040c2da791a21d54365c5d2dfabd006d402be3d4f3558f480b92ec52808b3e

kernel32

gdi32