1570012dc8305bb1fab7280839926591d59ecb873687ec06d6e6ba596010083d

General

Target
1570012dc8305bb1fab7280839926591d59ecb873687ec06d6e6ba596010083d
Size 851KB
Sample221203-wf6rbscb53
SHA256 1570012dc8305bb1fab7280839926591d59ecb873687ec06d6e6ba596010083d
MD5 1d5feda2e48bbca86647d607e576e392
SHA1 8d2bc964d15e8a8c14bffea566f8af08ef30ad55
SHA512 082a40a4538020393cf67d8ba0e32a3b87cac30e1b28c439d4f4494e8337de949f3aea09f8b677a7ef026f6051a935b9aa7f44fdb7f513ec6a426b3e5adc0f1c
SSDEEP 12288:cdhFRcJWZ87ECvq2cIwNONG7Z+FwOfLtxboZCrDa+wBA0lWqnZ9GZJt3gUYMW3x9:AhDcWP0IZ+FdDtpaa0YqZYZj3bP66
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1570012dc8305bb1fab7280839926591d59ecb873687ec06d6e6ba596010083d

.exe 851KB

1570012dc8305bb1fab7280839926591d59ecb873687ec06d6e6ba596010083d

IMPHASH 2ecba4f94e8f44b19ea360cb81da7876
SHA256 1570012dc8305bb1fab7280839926591d59ecb873687ec06d6e6ba596010083d
MD5 1d5feda2e48bbca86647d607e576e392
SHA1 8d2bc964d15e8a8c14bffea566f8af08ef30ad55
SHA512 082a40a4538020393cf67d8ba0e32a3b87cac30e1b28c439d4f4494e8337de949f3aea09f8b677a7ef026f6051a935b9aa7f44fdb7f513ec6a426b3e5adc0f1c
SSDEEP 12288:cdhFRcJWZ87ECvq2cIwNONG7Z+FwOfLtxboZCrDa+wBA0lWqnZ9GZJt3gUYMW3x9:AhDcWP0IZ+FdDtpaa0YqZYZj3bP66
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo WriteConsoleW GetBinaryTypeW FillConsoleOutputCharacterA SetThreadPriority GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetFullPathNameW HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

RegQueryInfoKeyW

Sharing

General

Malware Config

Signatures

File Explorer

1570012dc8305bb1fab7280839926591d59ecb873687ec06d6e6ba596010083d

kernel32

advapi32