6194a76a970d0a0f6994924cb6fd9d14c605e3e9329dc00515d2f5881f391d6a

General

Target
6194a76a970d0a0f6994924cb6fd9d14c605e3e9329dc00515d2f5881f391d6a
Size 193KB
Sample221202-c4rsjaaa7z
SHA256 6194a76a970d0a0f6994924cb6fd9d14c605e3e9329dc00515d2f5881f391d6a
MD5 220df4a05f919f6d419cc9f7803a7b71
SHA1 18164b0a055b6a3d18344620c6290773be88e7ed
SHA512 22ccc9fe946bf27a558e9686a78990abfc044c02529b52cc6cfd70b4c346ab2c7e4943e12aba2957ec68c1ee57eabb6b272a6e050de11df493e51d39b39df706
SSDEEP 3072:1gAmUdKgWcKV/I5jw7LR4NpVo/YthS72DFk50Gp8eH2LRs9E3AZxpR/L6LfY:z6cKVv76ZCyK0beHbvpVMf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6194a76a970d0a0f6994924cb6fd9d14c605e3e9329dc00515d2f5881f391d6a

.exe 193KB

6194a76a970d0a0f6994924cb6fd9d14c605e3e9329dc00515d2f5881f391d6a

IMPHASH c24ba5a868480ad6d3a33414ba7faf9e
SHA256 6194a76a970d0a0f6994924cb6fd9d14c605e3e9329dc00515d2f5881f391d6a
MD5 220df4a05f919f6d419cc9f7803a7b71
SHA1 18164b0a055b6a3d18344620c6290773be88e7ed
SHA512 22ccc9fe946bf27a558e9686a78990abfc044c02529b52cc6cfd70b4c346ab2c7e4943e12aba2957ec68c1ee57eabb6b272a6e050de11df493e51d39b39df706
SSDEEP 3072:1gAmUdKgWcKV/I5jw7LR4NpVo/YthS72DFk50Gp8eH2LRs9E3AZxpR/L6LfY:z6cKVv76ZCyK0beHbvpVMf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18039

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock FindFirstVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeA GetCurrentDirectoryA GetDriveTypeW CreateMailslotA CommConfigDialogW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA DeleteTimerQueue GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags LoadLibraryA DuplicateHandle EnumDateFormatsA GetSystemDirectoryW VerSetConditionMask GetComputerNameW EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesW CopyFileW GetComputerNameExW GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedDecrement InterlockedExchange GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointA _hread GetWindowsDirectoryA ClearCommBreak lstrlenW GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost SetMailslotInfo HeapWalk GetNamedPipeInfo EnumSystemCodePagesA UnregisterWait LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing

General

Malware Config

Signatures

File Explorer

6194a76a970d0a0f6994924cb6fd9d14c605e3e9329dc00515d2f5881f391d6a

kernel32

gdi32