5e33970559c4dc766fcc0236c53b04af48ed3f7e4c8d03467e5d2ddae082f423

General

Target
5e33970559c4dc766fcc0236c53b04af48ed3f7e4c8d03467e5d2ddae082f423
Size 389KB
Sample230129-trkbcsdd64
SHA256 5e33970559c4dc766fcc0236c53b04af48ed3f7e4c8d03467e5d2ddae082f423
MD5 f681b4a16bed5f6269aee217c6cd1222
SHA1 1d6ebeb45311492380202ea0f1bb9c3cb6bd9880
SHA512 f0543be85146c34312f8014030a83aa00f82e55a63a09d7d55ad2310ade7030f188dfca4ce0b66cc5c636e6d55dcf46673ca71e3900ef79a1ae3964a4c8c4a6f
SSDEEP 12288:V17lp2D7gWtUSvuWZJf34myr2H/BRGbmaROU:VVSsEf38risLR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5e33970559c4dc766fcc0236c53b04af48ed3f7e4c8d03467e5d2ddae082f423

.dll 389KB

5e33970559c4dc766fcc0236c53b04af48ed3f7e4c8d03467e5d2ddae082f423

IMPHASH 10a242f610d7c215b5db0bce54be6b71
SHA256 5e33970559c4dc766fcc0236c53b04af48ed3f7e4c8d03467e5d2ddae082f423
MD5 f681b4a16bed5f6269aee217c6cd1222
SHA1 1d6ebeb45311492380202ea0f1bb9c3cb6bd9880
SHA512 f0543be85146c34312f8014030a83aa00f82e55a63a09d7d55ad2310ade7030f188dfca4ce0b66cc5c636e6d55dcf46673ca71e3900ef79a1ae3964a4c8c4a6f
SSDEEP 12288:V17lp2D7gWtUSvuWZJf34myr2H/BRGbmaROU:VVSsEf38risLR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27284

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstChangeNotificationA GetSystemDirectoryA GetTempPathA Sleep GetModuleHandleA VirtualProtect GetModuleFileNameA HeapSize WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException InterlockedFlushSList GetLastError FreeLibrary LoadLibraryExW GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess HeapAlloc HeapFree WriteFile OutputDebugStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle CreateFileW

clusapi

ClusterNodeEnum ClusterNodeCloseEnum ClusterRegCloseKey CloseClusterGroup ChangeClusterResourceGroup AddClusterResourceDependency ClusterCloseEnum ClusterNetworkGetEnumCount BackupClusterDatabase CloseClusterNetwork ClusterNetworkControl CloseCluster ClusterNodeControl ClusterControl CloseClusterNotifyPort AddClusterResourceNode ClusterNodeGetEnumCount ClusterNetworkCloseEnum CloseClusterResource ClusterNetInterfaceControl CloseClusterNetInterface ClusterNetworkEnum ClusterOpenEnum ClusterEnum CloseClusterNode ClusterRegCreateKey ClusterNodeOpenEnum ClusterNetworkOpenEnum CanResourceBeDependent

Sharing

General

Malware Config

Signatures

File Explorer

5e33970559c4dc766fcc0236c53b04af48ed3f7e4c8d03467e5d2ddae082f423

kernel32

clusapi