45ca4ffea96447b1c832e506f1da5a401acf1afbe6d91e85e9ba49dcaae0eb9f

General

Target
45ca4ffea96447b1c832e506f1da5a401acf1afbe6d91e85e9ba49dcaae0eb9f
Size 181KB
Sample221203-zggelshb71
SHA256 45ca4ffea96447b1c832e506f1da5a401acf1afbe6d91e85e9ba49dcaae0eb9f
MD5 15b509e2f5b49fc22e89533a0a74fb96
SHA1 2c53aceafbdee0ee1c7e24fc2df025c283de2285
SHA512 39a2e18323edc1518ef606aedf6a3c5d224f92ba3fc4f58a6b7533e3f3898d452b5ce3ef4ac37f2b0a987941bdda120f6f513242aca69adfa7e45c8e09b4ef19
SSDEEP 3072:Lm1TJiHjKZpi+SaxfgaO1vTegtP4Bc+z/ewAX97CuCcwCCh6908ru8MV:t4oGgaO1vDx4GgGwM7CDCCYrdM
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

45ca4ffea96447b1c832e506f1da5a401acf1afbe6d91e85e9ba49dcaae0eb9f

.exe 181KB

45ca4ffea96447b1c832e506f1da5a401acf1afbe6d91e85e9ba49dcaae0eb9f

IMPHASH 99f0922107666544b27935aad2ad1f42
SHA256 45ca4ffea96447b1c832e506f1da5a401acf1afbe6d91e85e9ba49dcaae0eb9f
MD5 15b509e2f5b49fc22e89533a0a74fb96
SHA1 2c53aceafbdee0ee1c7e24fc2df025c283de2285
SHA512 39a2e18323edc1518ef606aedf6a3c5d224f92ba3fc4f58a6b7533e3f3898d452b5ce3ef4ac37f2b0a987941bdda120f6f513242aca69adfa7e45c8e09b4ef19
SSDEEP 3072:Lm1TJiHjKZpi+SaxfgaO1vTegtP4Bc+z/ewAX97CuCcwCCh6908ru8MV:t4oGgaO1vDx4GgGwM7CDCCYrdM
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27148

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

exit _cexit _XcptFilter __initenv _c_exit _stricmp atoi __getmainargs _exit _initterm __setusermatherr strrchr sscanf _strnicmp strtoul rewind calloc fgetc tolower _strcmpi getenv printf isspace fopen _snprintf strncpy _iob _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp fgets fclose sprintf _spawnlp _vsnprintf

kernel32

FormatMessageA LocalAlloc FreeLibrary InterlockedExchange GetModuleFileNameA CreateEventA GetModuleHandleA SetPriorityClass GetCurrentThread GetCommandLineA GetEnvironmentVariableA SetConsoleCtrlHandler GetCurrentProcess DuplicateHandle GetStdHandle GetPriorityClass CreateProcessA SetStdHandle SetLastError GetVersionExA LoadLibraryA GetProcAddress InitializeCriticalSection RaiseException CreateNamedPipeA CreateFileA GetLastError AllocConsole OutputDebugStringA WriteFile ExitProcess InterlockedDecrement ReadFile GetCurrentProcessId SetEvent Sleep LeaveCriticalSection InterlockedIncrement EnterCriticalSection WaitForSingleObject CloseHandle SetThreadPriority CreateThread

dbgeng

DebugCreate DebugConnect

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

Sharing

General

Malware Config

Signatures

File Explorer

45ca4ffea96447b1c832e506f1da5a401acf1afbe6d91e85e9ba49dcaae0eb9f

msvcrt

kernel32

dbgeng

advapi32