5605a8adc090d5d956510514a081b83dff567897d66173f703c51582d8c69073

General

Target
5605a8adc090d5d956510514a081b83dff567897d66173f703c51582d8c69073
Size 192KB
Sample221201-xsd3hsbf67
SHA256 5605a8adc090d5d956510514a081b83dff567897d66173f703c51582d8c69073
MD5 b61252bbfb9c254fe4ff0b8cda1306d7
SHA1 a75b2c258b17b58ed9c5190befe376725bfaed07
SHA512 a7278bf0277068a0b297df62b7e3ba5887456ed75d523a51697e6549319b58c2ba7325b442fdced2957a3bdf7462bca0defd760a964e7990e84a602a86a0e422
SSDEEP 3072:Q8mD7s+lOirnPc5kyJWRHXPZjfCyJYljDAbEa82IC:aVTrWqHAGEa82x
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5605a8adc090d5d956510514a081b83dff567897d66173f703c51582d8c69073

.exe 192KB

5605a8adc090d5d956510514a081b83dff567897d66173f703c51582d8c69073

IMPHASH f13a8a84e5020c3ac98ddd7a1d3766bb
SHA256 5605a8adc090d5d956510514a081b83dff567897d66173f703c51582d8c69073
MD5 b61252bbfb9c254fe4ff0b8cda1306d7
SHA1 a75b2c258b17b58ed9c5190befe376725bfaed07
SHA512 a7278bf0277068a0b297df62b7e3ba5887456ed75d523a51697e6549319b58c2ba7325b442fdced2957a3bdf7462bca0defd760a964e7990e84a602a86a0e422
SSDEEP 3072:Q8mD7s+lOirnPc5kyJWRHXPZjfCyJYljDAbEa82IC:aVTrWqHAGEa82x
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18407

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CopyFileExA CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA GlobalFlags LoadLibraryA DuplicateHandle EnumDateFormatsW GetSystemDirectoryW VerSetConditionMask GetComputerNameW EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesW CopyFileW GetComputerNameExA GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd EnumDateFormatsA GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedDecrement InterlockedExchange GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA _hread GetWindowsDirectoryA ClearCommBreak lstrlenW GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk GetNamedPipeInfo EnumSystemCodePagesW UnregisterWait LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing

General

Malware Config

Signatures

File Explorer

5605a8adc090d5d956510514a081b83dff567897d66173f703c51582d8c69073

kernel32

gdi32