6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9

General

Target
6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9
Size 192KB
Sample221203-wzcbtsdf72
SHA256 c5a2a178ecd22f6ab4f03ef26867735c7476f0d4f83ca3c74e4f2934a8dbc722
MD5 84d82695972fed329e5a77c4c1d8a96e
SHA1 ae65a4545d76f68583d41af5bbb93894188e86c6
SHA512 e83a4179d2d3aa70eea514835e43a8c15a2ab914b9b66c1ffae32d47e081ef2b59e29c325e10e5671c52a6541ddb0327013452045b1f3a14eb438a97ba6f0168
SSDEEP 6144:ljAZbjFtXJLlCzD1QpWRzXR9DuX2NKSaFTr:SZb/JL01QpOuXNSsr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9

.zip 192KB
6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9

.exe 350KB

6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9

SHA256 c5a2a178ecd22f6ab4f03ef26867735c7476f0d4f83ca3c74e4f2934a8dbc722
MD5 84d82695972fed329e5a77c4c1d8a96e
SHA1 ae65a4545d76f68583d41af5bbb93894188e86c6
SHA512 e83a4179d2d3aa70eea514835e43a8c15a2ab914b9b66c1ffae32d47e081ef2b59e29c325e10e5671c52a6541ddb0327013452045b1f3a14eb438a97ba6f0168
SSDEEP 6144:ljAZbjFtXJLlCzD1QpWRzXR9DuX2NKSaFTr:SZb/JL01QpOuXNSsr
MD5 SHA1 SHA512 SSDEEP

6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9

IMPHASH b483b26987043bea9f5c33199690f1db
SHA256 6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9
MD5 2ce74915f622e54426e4daa1bf3af868
SHA1 e8ae673f69cfa053e77557c0679a73f98fd68c97
SHA512 e03df5457d8e067c7fef705f2f2b4da223a65672fff9687f8ce0d9b3ce8f53dd4d0a11a14a1142e0f5d357112e040b8c39395b9fb21b5c733b65123ceae0eefd
SSDEEP 6144:598qmAfeccMqcmID15o0T3InMW2RqnXYY:59+AfrRmo15o0L2MW3oY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW CreateNamedPipeW GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumePathNameW GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW FillConsoleOutputCharacterA GetACP lstrlenW GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetBinaryTypeW GetFullPathNameW HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo GetOEMCP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

IsTokenUntrusted

Sharing

General

Malware Config

Signatures

File Explorer

6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9

6dc32e8584fc7df9abe827122c5f7e6d76d3355664f7e8ad7e37b3a0a12c87e9

kernel32

advapi32