ef165be8d517c6df7ce1492638107fdb5952ce0147b8170eeea802bda7961567

General

Target
ef165be8d517c6df7ce1492638107fdb5952ce0147b8170eeea802bda7961567
Size 842KB
Sample221204-nhdvbsdf22
SHA256 ef165be8d517c6df7ce1492638107fdb5952ce0147b8170eeea802bda7961567
MD5 29e926d6493d8dc2dc2acb9cd5ad9218
SHA1 f381c50833fa3bac6248c6f4e382e7d3307dc5c6
SHA512 b2abaf35442150dd6de19b82e337c4fb8dcb3b7d035616a0f2602acd786dd5632cf0ecded52e64574417c4e891902fb40bbd8d5aa03a94a27d5b7bef01ea756c
SSDEEP 24576:vOnK85cCPBp2bgS6thCg8dqiHPeF+/jG:vORUirudbPeF+/jG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ef165be8d517c6df7ce1492638107fdb5952ce0147b8170eeea802bda7961567

.exe 842KB

ef165be8d517c6df7ce1492638107fdb5952ce0147b8170eeea802bda7961567

IMPHASH 09f4659c998f83751ff2f51f90895eb9
SHA256 ef165be8d517c6df7ce1492638107fdb5952ce0147b8170eeea802bda7961567
MD5 29e926d6493d8dc2dc2acb9cd5ad9218
SHA1 f381c50833fa3bac6248c6f4e382e7d3307dc5c6
SHA512 b2abaf35442150dd6de19b82e337c4fb8dcb3b7d035616a0f2602acd786dd5632cf0ecded52e64574417c4e891902fb40bbd8d5aa03a94a27d5b7bef01ea756c
SSDEEP 24576:vOnK85cCPBp2bgS6thCg8dqiHPeF+/jG:vORUirudbPeF+/jG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21711

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetModuleHandleW GetConsoleAliasesA TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA TransactNamedPipe EnumSystemCodePagesA WriteConsoleW GetBinaryTypeW GetFullPathNameW SetThreadPriority GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetFileAttributesExW GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetSystemDefaultLangID HeapFree MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetFileType GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP SetStdHandle HeapSize CreateFileA CloseHandle

advapi32

RegQueryInfoKeyW

Sharing

General

Malware Config

Signatures

File Explorer

ef165be8d517c6df7ce1492638107fdb5952ce0147b8170eeea802bda7961567

kernel32

advapi32