dcdc2541ca6e33b271defa125b83f1dede7b5b693c96c5f77d84a04c5d739e1a

Sharing

Copy URL Twitter E-mail

General

Target
dcdc2541ca6e33b271defa125b83f1dede7b5b693c96c5f77d84a04c5d739e1a
Size 384KB
Sample221209-w63glagf8s
SHA256 dcdc2541ca6e33b271defa125b83f1dede7b5b693c96c5f77d84a04c5d739e1a
MD5 7c1dd866346022afd7ef57b03c802d31
SHA1 649361de31e6e6c2b390920efadf515ce731f424
SHA512 1edd67f5031e953fc8d3794ae3fce5f965338564ade191281a71578da885bb3214d43a93a3bc62ea24c884c82927da23ed7b70049df44c551615b645e05d9276
SSDEEP 6144:ZNSL3PIKWgBMNqlHXJnfrfwcLgy4eFn2Faa:ZMrPIlCMNcDw6DvFn8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

dcdc2541ca6e33b271defa125b83f1dede7b5b693c96c5f77d84a04c5d739e1a

.exe 384KB

dcdc2541ca6e33b271defa125b83f1dede7b5b693c96c5f77d84a04c5d739e1a

IMPHASH eebfb08ed8813b2a3d6d197e243c4c38
SHA256 dcdc2541ca6e33b271defa125b83f1dede7b5b693c96c5f77d84a04c5d739e1a
MD5 7c1dd866346022afd7ef57b03c802d31
SHA1 649361de31e6e6c2b390920efadf515ce731f424
SHA512 1edd67f5031e953fc8d3794ae3fce5f965338564ade191281a71578da885bb3214d43a93a3bc62ea24c884c82927da23ed7b70049df44c551615b645e05d9276
SSDEEP 6144:ZNSL3PIKWgBMNqlHXJnfrfwcLgy4eFn2Faa:ZMrPIlCMNcDw6DvFn8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA CreateJobObjectA LCMapStringA GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle FindActCtxSectionStringW WaitNamedPipeA TlsGetValue VirtualAlloc GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle