1d4ec1bcf97be6729fc7ed503f3c7c12bf684b2b8a201e0f4b69df680d0020b7

General

Target
1d4ec1bcf97be6729fc7ed503f3c7c12bf684b2b8a201e0f4b69df680d0020b7
Size 201KB
Sample221205-gmpn3abe95
SHA256 1d4ec1bcf97be6729fc7ed503f3c7c12bf684b2b8a201e0f4b69df680d0020b7
MD5 805ad7306632be02332ed2f6d95e9b2a
SHA1 e9865cbf6d35926e324f9ea7a1fed7c58cbc71f4
SHA512 90bc38ceed3da473aceb2144899b14af662bf4115bc55c0e62683322e014a69d536c7558a87faea7191a1ce9384dc3c89f264eb606c88d55b6f03ad8c9c44c41
SSDEEP 3072:lvIP8HDliQRTXI57HmdalRlnTWF/vyfjS67tQhTDw02rw3iQB8I:Wk8QRT8G4M+t7tv02s3iQK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1d4ec1bcf97be6729fc7ed503f3c7c12bf684b2b8a201e0f4b69df680d0020b7

.exe 201KB

1d4ec1bcf97be6729fc7ed503f3c7c12bf684b2b8a201e0f4b69df680d0020b7

IMPHASH 8aa8864f3dc5b90cc05394b2878d2d5f
SHA256 1d4ec1bcf97be6729fc7ed503f3c7c12bf684b2b8a201e0f4b69df680d0020b7
MD5 805ad7306632be02332ed2f6d95e9b2a
SHA1 e9865cbf6d35926e324f9ea7a1fed7c58cbc71f4
SHA512 90bc38ceed3da473aceb2144899b14af662bf4115bc55c0e62683322e014a69d536c7558a87faea7191a1ce9384dc3c89f264eb606c88d55b6f03ad8c9c44c41
SSDEEP 3072:lvIP8HDliQRTXI57HmdalRlnTWF/vyfjS67tQhTDw02rw3iQB8I:Wk8QRT8G4M+t7tv02s3iQK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18023

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryA GetModuleHandleW GlobalLock FindFirstVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeA GetCurrentDirectoryA GetDriveTypeW CreateMailslotA CommConfigDialogW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA DeleteTimerQueue GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags LoadLibraryA DuplicateHandle UnregisterWait GetSystemDirectoryW EnumDateFormatsA GetComputerNameW EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesW GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathW CopyFileW GetComputerNameExW GetVolumePathNameA GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedDecrement InterlockedExchange GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointA _hread ClearCommBreak lstrlenW GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost SetMailslotInfo HeapWalk GetNamedPipeInfo EnumSystemCodePagesA VerSetConditionMask LoadLibraryW GetLastError HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle DeleteFileA

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing

General

Malware Config

Signatures

File Explorer

1d4ec1bcf97be6729fc7ed503f3c7c12bf684b2b8a201e0f4b69df680d0020b7

kernel32

gdi32