01353aad6b9cc5bf0018951b41aed60da6e2a6a64151c3a206c6356dcdac8bb2

General

Target
01353aad6b9cc5bf0018951b41aed60da6e2a6a64151c3a206c6356dcdac8bb2
Size 710KB
Sample221201-tzxawsfg72
SHA256 01353aad6b9cc5bf0018951b41aed60da6e2a6a64151c3a206c6356dcdac8bb2
MD5 f272230670f1b845fdbf007fac1ff9ca
SHA1 09cee6add03d57f94ef2394547b44b9db43cb8b1
SHA512 02fd3684c0829bb3fc169e6a5deb28498d79bea97bf16d81b6905dd16eee4df7f820b63d4aeca4944f368ecd2f101ee5dd9117886dfdc1302c2338f580697c32
SSDEEP 12288:ycBPFfjVOKFwtZ3dcA00I3N4FnPo+ya5ZDv+6304WUCIlsyNEFil:ycBPFfJLFoFdm0I34nPo+ya51v+63jC8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

01353aad6b9cc5bf0018951b41aed60da6e2a6a64151c3a206c6356dcdac8bb2

.exe 710KB

01353aad6b9cc5bf0018951b41aed60da6e2a6a64151c3a206c6356dcdac8bb2

IMPHASH 862efde147d6e81cd1d42fa2fe2ff625
SHA256 01353aad6b9cc5bf0018951b41aed60da6e2a6a64151c3a206c6356dcdac8bb2
MD5 f272230670f1b845fdbf007fac1ff9ca
SHA1 09cee6add03d57f94ef2394547b44b9db43cb8b1
SHA512 02fd3684c0829bb3fc169e6a5deb28498d79bea97bf16d81b6905dd16eee4df7f820b63d4aeca4944f368ecd2f101ee5dd9117886dfdc1302c2338f580697c32
SSDEEP 12288:ycBPFfjVOKFwtZ3dcA00I3N4FnPo+ya5ZDv+6304WUCIlsyNEFil:ycBPFfJLFoFdm0I34nPo+ya51v+63jC8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18231

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute EnumDateFormatsW FindFirstVolumeA GlobalFlags LoadLibraryA DuplicateHandle CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd EnumDateFormatsA GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedDecrement InterlockedExchange GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA _hread GetWindowsDirectoryA ClearCommBreak lstrlenW GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk GetNamedPipeInfo EnumSystemCodePagesW GetConsoleFontSize LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing

General

Malware Config

Signatures

File Explorer

01353aad6b9cc5bf0018951b41aed60da6e2a6a64151c3a206c6356dcdac8bb2

kernel32

gdi32