31b0fbf27754e6caaa1e4214cca7afa046f8dccc299c5db6a8fadc28ebce736e

General

Target
31b0fbf27754e6caaa1e4214cca7afa046f8dccc299c5db6a8fadc28ebce736e
Size 342KB
Sample221204-karjnsff21
SHA256 31b0fbf27754e6caaa1e4214cca7afa046f8dccc299c5db6a8fadc28ebce736e
MD5 495288254c13102691724915adbdedd2
SHA1 ac3139a4e222cd792a61882dc71e62149f460755
SHA512 ac34cabb879d31e556d01fe80f440f6e29fe7a5d3564b404b2b0c1bef2a955417f458d5170008622d18256281b1e9a0fd9dbd7d955f6e735a70d7f8729dc026b
SSDEEP 6144:BnwoZM7WgJej+OoP5QbI7YFymlglhwn7G1PK:BnwoZAk6nagYFyWglhwn7G
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

31b0fbf27754e6caaa1e4214cca7afa046f8dccc299c5db6a8fadc28ebce736e

.exe 342KB

31b0fbf27754e6caaa1e4214cca7afa046f8dccc299c5db6a8fadc28ebce736e

IMPHASH 232a88a68cd6cc5c1194cb5ecddf784e
SHA256 31b0fbf27754e6caaa1e4214cca7afa046f8dccc299c5db6a8fadc28ebce736e
MD5 495288254c13102691724915adbdedd2
SHA1 ac3139a4e222cd792a61882dc71e62149f460755
SHA512 ac34cabb879d31e556d01fe80f440f6e29fe7a5d3564b404b2b0c1bef2a955417f458d5170008622d18256281b1e9a0fd9dbd7d955f6e735a70d7f8729dc026b
SSDEEP 6144:BnwoZM7WgJej+OoP5QbI7YFymlglhwn7G1PK:BnwoZAk6nagYFyWglhwn7G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21384

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetFullPathNameW GetVolumePathNameA SetThreadPriority GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetBinaryTypeW GetSystemDefaultLangID HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP CloseHandle CreateFileA

advapi32

RegQueryInfoKeyW

Sharing

General

Malware Config

Signatures

File Explorer

31b0fbf27754e6caaa1e4214cca7afa046f8dccc299c5db6a8fadc28ebce736e

kernel32

advapi32