cba50262e42c695572cd4591b025a3f81d28243faed9db98583af59639914be6

General

Target
cba50262e42c695572cd4591b025a3f81d28243faed9db98583af59639914be6
Size 404.2MB
Sample230117-ag8resbf4t
SHA256 cba50262e42c695572cd4591b025a3f81d28243faed9db98583af59639914be6
MD5 fcb4b9dfe2f6ed4504410160001d03a7
SHA1 2b66273ea2797e5ba3e33582da6d0f91f5e7833c
SHA512 3373699f165aab7cccfb6062ac3c3a49d76fc7591f971a76ce4e6d3eb7e1f0fdfad2d71a7632bd5013a44d8b718ef510f3198c87572f58d828c5d68a613a9efa
SSDEEP 49152:At33d2m6BN4NPGonVbx5Y3Va5i/QWKxLBNZZcAt:iQozTG3Va5iYJxLB7ZcA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

cba50262e42c695572cd4591b025a3f81d28243faed9db98583af59639914be6

.exe 404.2MB

cba50262e42c695572cd4591b025a3f81d28243faed9db98583af59639914be6

IMPHASH 7aaab2800e841a470c1d48216474a546
SHA256 cba50262e42c695572cd4591b025a3f81d28243faed9db98583af59639914be6
MD5 fcb4b9dfe2f6ed4504410160001d03a7
SHA1 2b66273ea2797e5ba3e33582da6d0f91f5e7833c
SHA512 3373699f165aab7cccfb6062ac3c3a49d76fc7591f971a76ce4e6d3eb7e1f0fdfad2d71a7632bd5013a44d8b718ef510f3198c87572f58d828c5d68a613a9efa
SSDEEP 49152:At33d2m6BN4NPGonVbx5Y3Va5i/QWKxLBNZZcAt:iQozTG3Va5iYJxLB7ZcA
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

98:b6:29:d3:0f:98:66:41:c2:e1:86:c2:ef:a0:16:16:58:38:8e:b4:29:27:07:9c:15:13:41:a9:00:78:e8:04

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

41600

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID lstrlenA GetStringTypeA FreeLibrary SetConsoleTextAttribute GetEnvironmentStringsW GetProcessHeap GetUserDefaultLangID GetCommandLineA SetHandleCount Sleep GetConsoleWindow SetConsoleCP GetFileAttributesA GetModuleFileNameW GetACP MultiByteToWideChar lstrlenW GetStdHandle GetCurrentDirectoryW SetLastError GetProcAddress IsValidCodePage GetPrivateProfileStringA SetConsoleOutputCP SetConsoleTitleW GetModuleHandleA CloseHandle ReadFile SetEndOfFile SetFilePointerEx SetStdHandle CreateFileW GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW LCMapStringEx HeapAlloc HeapQueryInformation HeapSize InterlockedIncrement InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetLastError ExitProcess GetModuleHandleExW AreFileApisANSI RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount IsDebuggerPresent IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetStartupInfoW GetModuleHandleW WriteFile HeapValidate GetSystemInfo LoadLibraryExW GetOEMCP GetCPInfo GetCurrentThreadId GetFileType InitOnceExecuteOnce GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 FreeEnvironmentStringsW WideCharToMultiByte OutputDebugStringW WaitForSingleObjectEx CreateThread LoadLibraryW OutputDebugStringA WriteConsoleW HeapFree HeapReAlloc ReadConsoleW

user32

OpenIcon CreateDialogParamA IsIconic GetTopWindow GetParent CharNextExA CharPrevA GetForegroundWindow GetDesktopWindow IsWindow IsWow64Message IsWindowVisible GetDlgItemTextA GetMessageTime GetMessagePos RegisterClassA GetWindowTextLengthA

shell32

SHGetFolderPathW

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

cba50262e42c695572cd4591b025a3f81d28243faed9db98583af59639914be6

PE Signature issue

kernel32

user32

shell32