2f07f8b6cd97613fb8f09b60e8114674c93e45eb028f02fc2227d201b4aeddec

General

Target
2f07f8b6cd97613fb8f09b60e8114674c93e45eb028f02fc2227d201b4aeddec
Size 759KB
Sample221208-qrbsfaab55
SHA256 2f07f8b6cd97613fb8f09b60e8114674c93e45eb028f02fc2227d201b4aeddec
MD5 a610a6d82c638be7bb321856c77ffeef
SHA1 8b249f2d8c89fc11754e640ae99ec6de8d37eb38
SHA512 a3f438935e7c3656705202d8ad06c377b81619f7f63498086589d41ebf2bd8f8762ce474b72a20e0dd57685ebb62b3a2920a86fdc280dd95601e8d44d24cbb23
SSDEEP 12288:yBt02EWpgnrmAqdXRVH+LLQMXBrgwRH2p4OiLUdlqYXD9QTXbh:yBtCW0KA2Pe1swRWCLLSlqYXYL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2f07f8b6cd97613fb8f09b60e8114674c93e45eb028f02fc2227d201b4aeddec

.exe 759KB

2f07f8b6cd97613fb8f09b60e8114674c93e45eb028f02fc2227d201b4aeddec

IMPHASH 0f258c672059cc7b87b3fd818b59f4c1
SHA256 2f07f8b6cd97613fb8f09b60e8114674c93e45eb028f02fc2227d201b4aeddec
MD5 a610a6d82c638be7bb321856c77ffeef
SHA1 8b249f2d8c89fc11754e640ae99ec6de8d37eb38
SHA512 a3f438935e7c3656705202d8ad06c377b81619f7f63498086589d41ebf2bd8f8762ce474b72a20e0dd57685ebb62b3a2920a86fdc280dd95601e8d44d24cbb23
SSDEEP 12288:yBt02EWpgnrmAqdXRVH+LLQMXBrgwRH2p4OiLUdlqYXD9QTXbh:yBtCW0KA2Pe1swRWCLLSlqYXYL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CallNamedPipeA EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasExesLengthW CompareStringW AreFileApisANSI EnumCalendarInfoExA SetProcessPriorityBoost AddConsoleAliasW CreateFileW SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleW GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointA SearchPathW MoveFileW CallNamedPipeW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogA GetProcAddress GetModuleHandleA LocalAlloc DeleteTimerQueue SetHandleInformation FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesA GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleFontSize GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetNamedPipeHandleStateW WaitForSingleObjectEx GetNamedPipeInfo ZombifyActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsW SetConsoleTitleW SetVolumeMountPointW ClearCommError lstrlenW CreateDirectoryExA GlobalFindAtomW TerminateJobObject lstrcpynA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapFree HeapAlloc DeleteFileA GetCommandLineA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

2f07f8b6cd97613fb8f09b60e8114674c93e45eb028f02fc2227d201b4aeddec

kernel32