af1cf69392f81789b4b7841e45a76dee27849a561562e7aae15a27271dbe3254

General

Target
af1cf69392f81789b4b7841e45a76dee27849a561562e7aae15a27271dbe3254
Size 259KB
Sample221212-galrmsaf96
SHA256 af1cf69392f81789b4b7841e45a76dee27849a561562e7aae15a27271dbe3254
MD5 fbdde4446467cf7b6e2edc26f470ed98
SHA1 aaa3b3b42763aaf8118b01f9e5f9a4e96dfcd14c
SHA512 1351e7cf0dd4c82dffae3d563a99ecbe91edbf00566f18fffbb88e9c53f5353eb7e5515ee9d6bb5928b49aefc365296bd7bf1caeda2b340e2037d8f3628577a7
SSDEEP 6144:Q5uLRV5os/XcC6h1uHPsqYJPSoyft+OWcpgX:QEVV5os/XcjjAsqYM+Up
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

af1cf69392f81789b4b7841e45a76dee27849a561562e7aae15a27271dbe3254

.exe 259KB

af1cf69392f81789b4b7841e45a76dee27849a561562e7aae15a27271dbe3254

IMPHASH 27fc514cfd775c984573e93b88b08234
SHA256 af1cf69392f81789b4b7841e45a76dee27849a561562e7aae15a27271dbe3254
MD5 fbdde4446467cf7b6e2edc26f470ed98
SHA1 aaa3b3b42763aaf8118b01f9e5f9a4e96dfcd14c
SHA512 1351e7cf0dd4c82dffae3d563a99ecbe91edbf00566f18fffbb88e9c53f5353eb7e5515ee9d6bb5928b49aefc365296bd7bf1caeda2b340e2037d8f3628577a7
SSDEEP 6144:Q5uLRV5os/XcC6h1uHPsqYJPSoyft+OWcpgX:QEVV5os/XcjjAsqYM+Up
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23430

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesW EnumDateFormatsA OpenMutexA GetConsoleAliasesLengthW CompareStringW AreFileApisANSI CreateFileW EnumCalendarInfoExA RequestWakeupLatency AddConsoleAliasW CreateFileA SetComputerNameA GetSystemWindowsDirectoryA GetModuleHandleA GlobalLock FindFirstVolumeMountPointW CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW MoveFileW GetCurrentDirectoryW GetDriveTypeW CreateMailslotA CommConfigDialogA GetProcAddress LocalAlloc CancelTimerQueueTimer SetHandleInformation CreateJobObjectW WriteConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags DuplicateHandle GetTickCount BackupWrite GetSystemDirectoryA VerSetConditionMask GetComputerNameW EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionW CallNamedPipeW GetStringTypeExW GetPrivateProfileSectionNamesW GetFileAttributesW TransactNamedPipe ActivateActCtx SearchPathA CopyFileA GetComputerNameExW GetVolumePathNameW GetShortPathNameW ReadFile ResetEvent LocalShrink LocalLock GlobalUnfix SetCommState WriteConsoleInputW DeleteAtom FindResourceW GetConsoleSelectionInfo GetOverlappedResult GetPrivateProfileStructA ConvertThreadToFiber InterlockedCompareExchange InterlockedExchangeAdd GetConsoleMode EnumCalendarInfoA GetConsoleAliasExesLengthA InterlockedDecrement CallNamedPipeA ZombifyActCtx GenerateConsoleCtrlEvent AddAtomA GetThreadPriority FreeEnvironmentStringsW InterlockedExchange GetConsoleTitleA SetVolumeMountPointA ClearCommError lstrlenA GlobalFindAtomW TerminateJobObject lstrcpynA WritePrivateProfileStructA LoadLibraryW RaiseException RtlUnwind GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA MultiByteToWideChar WideCharToMultiByte LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

gdi32

GetBoundsRect

Sharing

General

Malware Config

Signatures

File Explorer

af1cf69392f81789b4b7841e45a76dee27849a561562e7aae15a27271dbe3254

kernel32

gdi32