f3af0219cf6a4845af1bfd748a227396773a4691ad414c84756245cf3d767e14

General

Target
f3af0219cf6a4845af1bfd748a227396773a4691ad414c84756245cf3d767e14
Size 782KB
Sample221207-rheneafb42
SHA256 f3af0219cf6a4845af1bfd748a227396773a4691ad414c84756245cf3d767e14
MD5 1930f5723086cf816e73aab7161583dd
SHA1 310ed8651b5b85e2de223e94c967dee7afcbc76d
SHA512 aa3411ae9867398ed6e46247bac7e508b2f07f2faff7ffef7a9664ac5b018c92ccc8ff0c013699897976e88feeedcf9578a33798c2947ec14e8d97288bbe819a
SSDEEP 24576:3W3u1YeE6VEPX8lx/g+N/oRGkFiT/n3btqBsEl:3skYeE6VEv2T+GR/0l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f3af0219cf6a4845af1bfd748a227396773a4691ad414c84756245cf3d767e14

.exe 782KB

f3af0219cf6a4845af1bfd748a227396773a4691ad414c84756245cf3d767e14

IMPHASH d232cd889354f069585194088585c52d
SHA256 f3af0219cf6a4845af1bfd748a227396773a4691ad414c84756245cf3d767e14
MD5 1930f5723086cf816e73aab7161583dd
SHA1 310ed8651b5b85e2de223e94c967dee7afcbc76d
SHA512 aa3411ae9867398ed6e46247bac7e508b2f07f2faff7ffef7a9664ac5b018c92ccc8ff0c013699897976e88feeedcf9578a33798c2947ec14e8d97288bbe819a
SSDEEP 24576:3W3u1YeE6VEPX8lx/g+N/oRGkFiT/n3btqBsEl:3skYeE6VEv2T+GR/0l
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27047

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeW EnumSystemCodePagesA EnumDateFormatsA OpenMutexW GetConsoleAliasExesLengthW CompareStringA SetFileApisToANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasA CreateFileA SetComputerNameA GetWindowsDirectoryA GetModuleHandleW GlobalUnlock FindFirstVolumeMountPointA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileA GetCurrentDirectoryA GetDriveTypeW CreateMailslotW CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue GetHandleInformation FormatMessageA CreateJobObjectA ReadConsoleOutputAttribute FindFirstVolumeW LocalFlags LoadLibraryA DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryW VerSetConditionMask GetComputerNameA EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe GetCurrentActCtx SearchPathA CopyFileW GetComputerNameExW GetVolumePathNameW GetShortPathNameW FlushFileBuffers lstrcmpW MoveFileW FindNextFileW ResetEvent LocalCompact CreateMutexW LocalLock GlobalWire SetCommState WriteConsoleInputA InitAtomTable FindResourceW GetOverlappedResult GetPrivateProfileStructA DeleteFiber InterlockedCompareExchange GetConsoleMode EnumCalendarInfoW GetConsoleFontSize InterlockedDecrement GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleA SetVolumeMountPointW GetWindowsDirectoryW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomA TerminateJobObject lstrcpynA GetProcessPriorityBoost SetMailslotInfo WaitForSingleObjectEx GetNamedPipeInfo TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer GetConsoleCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

f3af0219cf6a4845af1bfd748a227396773a4691ad414c84756245cf3d767e14

kernel32