50be3a3ba4ef0d9fae3e8deb2e6686c3175d5dba08f7f2566f0f9f034611cc2e

General

Target
50be3a3ba4ef0d9fae3e8deb2e6686c3175d5dba08f7f2566f0f9f034611cc2e
Size 849KB
Sample221202-wsd7vaeg6v
SHA256 50be3a3ba4ef0d9fae3e8deb2e6686c3175d5dba08f7f2566f0f9f034611cc2e
MD5 91e17504769c6bb71d9e9f06b4495c07
SHA1 ff53c8befb7c94683e1a662ecf2b77cd342146f5
SHA512 fa9714c1e7f80ac33d88dcd85022694caea486324ba2f8d8d47be0281048863a6e62942f76737662b4daeb21ad84efb6294ebb83ba153e9fa01fdd5b4cce54e1
SSDEEP 24576:gOZS3vxhhW4gd8nzscUauTJLosMESARHGF:gOZ85e8zVHuTJDSARm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

50be3a3ba4ef0d9fae3e8deb2e6686c3175d5dba08f7f2566f0f9f034611cc2e

.exe 849KB

50be3a3ba4ef0d9fae3e8deb2e6686c3175d5dba08f7f2566f0f9f034611cc2e

IMPHASH adf05e4ae4084c6bf3a2c6a5da309837
SHA256 50be3a3ba4ef0d9fae3e8deb2e6686c3175d5dba08f7f2566f0f9f034611cc2e
MD5 91e17504769c6bb71d9e9f06b4495c07
SHA1 ff53c8befb7c94683e1a662ecf2b77cd342146f5
SHA512 fa9714c1e7f80ac33d88dcd85022694caea486324ba2f8d8d47be0281048863a6e62942f76737662b4daeb21ad84efb6294ebb83ba153e9fa01fdd5b4cce54e1
SSDEEP 24576:gOZS3vxhhW4gd8nzscUauTJLosMESARHGF:gOZ85e8zVHuTJDSARm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FillConsoleOutputCharacterA lstrcpynA OpenJobObjectA AddConsoleAliasW CreateHardLinkA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW SetFileShortNameW GetVolumeInformationA CopyFileW GetCalendarInfoA LeaveCriticalSection GetFileAttributesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW GetBinaryTypeA GetACP lstrlenW CreateJobObjectA GetConsoleAliasesW GetVolumeNameForVolumeMountPointA GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW CreateNamedPipeA EnumSystemCodePagesW LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetProfileIntA GetFullPathNameW HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetCPInfo GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP RaiseException

advapi32

IsTokenUntrusted

Sharing

General

Malware Config

Signatures

File Explorer

50be3a3ba4ef0d9fae3e8deb2e6686c3175d5dba08f7f2566f0f9f034611cc2e

kernel32

advapi32