2e7f41d9c8413e84d93dc86c479609201d818c8659407f54a3d081e206b498b6

General

Target
2e7f41d9c8413e84d93dc86c479609201d818c8659407f54a3d081e206b498b6
Size 319KB
Sample221210-kfg77afb64
SHA256 2e7f41d9c8413e84d93dc86c479609201d818c8659407f54a3d081e206b498b6
MD5 ae4ef16c0afed6f7e2a99c3c21217787
SHA1 c296b11855f6da6b5c03998e7df9d1d0932d0598
SHA512 096cf7a32512c954d9aedf1f243e4f6a55243f4b431f67a5cee8c57934c36d9b853f3679f9f8e9f4720e32c66859d339f9fca34799a0acdcb39d4464f51ac358
SSDEEP 6144:otRvILihNSxUamy7yP3A+hAQ6zrl8DGi0ZrrMC7C:oTQ+hNGlmnPABBzrJRQEC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2e7f41d9c8413e84d93dc86c479609201d818c8659407f54a3d081e206b498b6

.exe 319KB

2e7f41d9c8413e84d93dc86c479609201d818c8659407f54a3d081e206b498b6

IMPHASH 4e1ec8a021a2339c06de0798b04af4f0
SHA256 2e7f41d9c8413e84d93dc86c479609201d818c8659407f54a3d081e206b498b6
MD5 ae4ef16c0afed6f7e2a99c3c21217787
SHA1 c296b11855f6da6b5c03998e7df9d1d0932d0598
SHA512 096cf7a32512c954d9aedf1f243e4f6a55243f4b431f67a5cee8c57934c36d9b853f3679f9f8e9f4720e32c66859d339f9fca34799a0acdcb39d4464f51ac358
SSDEEP 6144:otRvILihNSxUamy7yP3A+hAQ6zrl8DGi0ZrrMC7C:oTQ+hNGlmnPABBzrJRQEC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28758

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA GetFileAttributesW WriteConsoleW SetThreadPriority CreateJobObjectA LCMapStringA FillConsoleOutputCharacterW GetLastError VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle FindActCtxSectionStringW GetProfileIntW GetComputerNameW TlsGetValue GetProcAddress GetFullPathNameA HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogA ReportEventW

Sharing

General

Malware Config

Signatures

File Explorer

2e7f41d9c8413e84d93dc86c479609201d818c8659407f54a3d081e206b498b6

kernel32

gdi32

advapi32