551a90798ceceb1fe20a36cc5cf7196f7b9e643f1f4af084d47c17a1a92be58d

General

Target
551a90798ceceb1fe20a36cc5cf7196f7b9e643f1f4af084d47c17a1a92be58d
Size 380KB
Sample221204-m7azascf68
SHA256 551a90798ceceb1fe20a36cc5cf7196f7b9e643f1f4af084d47c17a1a92be58d
MD5 21739809cc9339a4b01e19ba3ad7aca2
SHA1 1682bdf834e7bbed89f27d4f5a6065d4b9da48a5
SHA512 7538c5c248d2fe04f58d8b0c13a6593ce43bfa4964a2ca7d655f1a26c23bbdf3a9641e5104622bd483895b0e596c4649ed69f1c00e05f1dcc2442e9c31b94a07
SSDEEP 6144:GXeSpisOXeID/5E3BVPykHMfypymlgl6ZG1P09:GXeSpisgt9MBVw6pyWgl6ZG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

551a90798ceceb1fe20a36cc5cf7196f7b9e643f1f4af084d47c17a1a92be58d

.exe 380KB

551a90798ceceb1fe20a36cc5cf7196f7b9e643f1f4af084d47c17a1a92be58d

IMPHASH 09f4659c998f83751ff2f51f90895eb9
SHA256 551a90798ceceb1fe20a36cc5cf7196f7b9e643f1f4af084d47c17a1a92be58d
MD5 21739809cc9339a4b01e19ba3ad7aca2
SHA1 1682bdf834e7bbed89f27d4f5a6065d4b9da48a5
SHA512 7538c5c248d2fe04f58d8b0c13a6593ce43bfa4964a2ca7d655f1a26c23bbdf3a9641e5104622bd483895b0e596c4649ed69f1c00e05f1dcc2442e9c31b94a07
SSDEEP 6144:GXeSpisOXeID/5E3BVPykHMfypymlgl6ZG1P09:GXeSpisgt9MBVw6pyWgl6ZG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21711

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetBinaryTypeW GetFullPathNameW SetThreadPriority GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetSystemDefaultLangID HeapFree MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle HeapSize CreateFileA CloseHandle

advapi32

RegQueryInfoKeyW

Sharing

General

Malware Config

Signatures

File Explorer

551a90798ceceb1fe20a36cc5cf7196f7b9e643f1f4af084d47c17a1a92be58d

kernel32

advapi32