69d70af08927669c8408ed6edc6d8bff0f6e7c6f306db473c6de5f470d6c6f29

Sharing

Copy URL Twitter E-mail

General

Target
69d70af08927669c8408ed6edc6d8bff0f6e7c6f306db473c6de5f470d6c6f29
Size 384KB
Sample221209-xpx18adh36
SHA256 69d70af08927669c8408ed6edc6d8bff0f6e7c6f306db473c6de5f470d6c6f29
MD5 51a18f2ff16ae991f05d4160808b7f64
SHA1 d86ef49ce438c242d7ccbe9884ed85ea617609b2
SHA512 221305ef29a7c7be98a26da69c8b1b645577cef50580aac780dc83dfae15a679807f40415dfa92f47d6ac3299c83cc015b831112f9f49550b743356b93c20d07
SSDEEP 6144:pnfXLOVDK5g/pwPjGnx81sKVOwcTy+3IeFn2Faq:pf6VDa2wqFKcwi3/Fng
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

69d70af08927669c8408ed6edc6d8bff0f6e7c6f306db473c6de5f470d6c6f29

.exe 384KB

69d70af08927669c8408ed6edc6d8bff0f6e7c6f306db473c6de5f470d6c6f29

IMPHASH eebfb08ed8813b2a3d6d197e243c4c38
SHA256 69d70af08927669c8408ed6edc6d8bff0f6e7c6f306db473c6de5f470d6c6f29
MD5 51a18f2ff16ae991f05d4160808b7f64
SHA1 d86ef49ce438c242d7ccbe9884ed85ea617609b2
SHA512 221305ef29a7c7be98a26da69c8b1b645577cef50580aac780dc83dfae15a679807f40415dfa92f47d6ac3299c83cc015b831112f9f49550b743356b93c20d07
SSDEEP 6144:pnfXLOVDK5g/pwPjGnx81sKVOwcTy+3IeFn2Faq:pf6VDa2wqFKcwi3/Fng
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28918

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA CreateJobObjectA LCMapStringA GetProfileIntA FillConsoleOutputCharacterW GetLastError GetProcAddress EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle FindActCtxSectionStringW WaitNamedPipeA TlsGetValue VirtualAlloc GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle