af0486442f64677eec45ab4f1a59d5d28ace44c6b02612e40fcb27917335bb09

General

Target
af0486442f64677eec45ab4f1a59d5d28ace44c6b02612e40fcb27917335bb09
Size 792KB
Sample221206-ehvcmscc9y
SHA256 af0486442f64677eec45ab4f1a59d5d28ace44c6b02612e40fcb27917335bb09
MD5 cec35c05dd34007698f769cdfd7030c3
SHA1 fc50f1ee05744e02c0a959edfd88d28b23ded937
SHA512 fb1bedd449b966dc963b531ca671cb5c50c30eac2811abf4ef2cb170cdd3be77caa695ab312305b440d4ab86159ecc8eb916adf56908133ee68823a0884cf95a
SSDEEP 24576:kuh3bwM+jd5AvVx14pKWzphwuGHXYTljsy4L5U:kuJUpjbAvTw779GHX2ljoL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

af0486442f64677eec45ab4f1a59d5d28ace44c6b02612e40fcb27917335bb09

.exe 792KB

af0486442f64677eec45ab4f1a59d5d28ace44c6b02612e40fcb27917335bb09

IMPHASH b66bcdd169ea4dbb3d98b3a2c400830b
SHA256 af0486442f64677eec45ab4f1a59d5d28ace44c6b02612e40fcb27917335bb09
MD5 cec35c05dd34007698f769cdfd7030c3
SHA1 fc50f1ee05744e02c0a959edfd88d28b23ded937
SHA512 fb1bedd449b966dc963b531ca671cb5c50c30eac2811abf4ef2cb170cdd3be77caa695ab312305b440d4ab86159ecc8eb916adf56908133ee68823a0884cf95a
SSDEEP 24576:kuh3bwM+jd5AvVx14pKWzphwuGHXYTljsy4L5U:kuJUpjbAvTw779GHX2ljoL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

33783

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringA SetFileApisToANSI EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasA CreateFileA SetComputerNameA GetWindowsDirectoryA GetModuleHandleW GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputW FindNextVolumeMountPointW SearchPathW MoveFileA CallNamedPipeA GetCurrentDirectoryA GetDriveTypeA CreateMailslotW CommConfigDialogW GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFlags LoadLibraryA DuplicateHandle UnregisterWait GetSystemDirectoryW VerSetConditionMask GetComputerNameA EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesW GetFileAttributesW EnumSystemCodePagesA GetCurrentActCtx SearchPathA CopyFileW GetComputerNameExW GetVolumePathNameW GetShortPathNameW FlushFileBuffers lstrcmpW MoveFileW FindNextFileW ResetEvent LocalCompact CreateMutexW LocalLock GlobalWire SetCommState WriteConsoleInputA InitAtomTable FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoW GetConsoleFontSize InterlockedDecrement GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointW _hread GetWindowsDirectoryW ClearCommBreak lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject lstrcpynW GetProcessPriorityBoost SetMailslotInfo HeapWalk GetNamedPipeInfo TransactNamedPipe LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharABCWidthsA

Sharing

General

Malware Config

Signatures

File Explorer

af0486442f64677eec45ab4f1a59d5d28ace44c6b02612e40fcb27917335bb09

kernel32

gdi32