0dbd6e77ea6071df4704e35d12d2e63a7f755bdb06194cc2597681beee5a468f

General

Target
0dbd6e77ea6071df4704e35d12d2e63a7f755bdb06194cc2597681beee5a468f
Size 329KB
Sample221210-shgnfaad4x
SHA256 0dbd6e77ea6071df4704e35d12d2e63a7f755bdb06194cc2597681beee5a468f
MD5 86f5c0ac5d7174289a605ba00ffdb417
SHA1 5c2bea944f21839bee1831343198001503cfc5ac
SHA512 d15f337922b89b421a579e7f57a46f13f9ae64b0030387a33ba29c7d3096e76f5ffa2d15c185be92a4992e75d09c24e8c1744939420fc23c44dab7dafb83db4e
SSDEEP 6144:hbrrHLV21jphJxakomH/W/riI0ZrrMC7Cg:hTx21jphJxVomH/W4RQECg
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0dbd6e77ea6071df4704e35d12d2e63a7f755bdb06194cc2597681beee5a468f

.exe 329KB

0dbd6e77ea6071df4704e35d12d2e63a7f755bdb06194cc2597681beee5a468f

IMPHASH 7558cab9efbf4dcb52221656a00b3f7b
SHA256 0dbd6e77ea6071df4704e35d12d2e63a7f755bdb06194cc2597681beee5a468f
MD5 86f5c0ac5d7174289a605ba00ffdb417
SHA1 5c2bea944f21839bee1831343198001503cfc5ac
SHA512 d15f337922b89b421a579e7f57a46f13f9ae64b0030387a33ba29c7d3096e76f5ffa2d15c185be92a4992e75d09c24e8c1744939420fc23c44dab7dafb83db4e
SSDEEP 6144:hbrrHLV21jphJxakomH/W/riI0ZrrMC7Cg:hTx21jphJxVomH/W4RQECg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28294

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetComputerNameW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority GetProfileIntW FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc SetFileAttributesA LoadLibraryA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle AddConsoleAliasA TlsGetValue LCMapStringA GetFullPathNameA HeapAlloc Sleep ExitProcess GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WriteConsoleA GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA RaiseException GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogA ReportEventW

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

0dbd6e77ea6071df4704e35d12d2e63a7f755bdb06194cc2597681beee5a468f

kernel32

advapi32

winhttp