2a984837bb7be00caa8937abaa695a72f507252e3ac22157bd6dcd3a4c762da1

Sharing

Copy URL Twitter E-mail

General

Target
2a984837bb7be00caa8937abaa695a72f507252e3ac22157bd6dcd3a4c762da1
Size 283KB
Sample230129-w28staac7t
SHA256 2a984837bb7be00caa8937abaa695a72f507252e3ac22157bd6dcd3a4c762da1
MD5 eb352086838f3e62929c6982938257e8
SHA1 190f97f6ca0e1c058506736e0b5b96e1b4a9b6e2
SHA512 55e1bd1a6617928b74b6ec5e04ce49591f650e2a32bd38d396ce919ba59b65a8f3e27c870e71f8740205be2251954a5867a1e11fa8d94af26b0fb5e1d6cd73d2
SSDEEP 6144:+4LuhL2086TbM3v0ofYfyXyqLoittx18a:7mL52v0oiyXy6oCtx18a
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2a984837bb7be00caa8937abaa695a72f507252e3ac22157bd6dcd3a4c762da1

.exe 283KB

2a984837bb7be00caa8937abaa695a72f507252e3ac22157bd6dcd3a4c762da1

IMPHASH 6d57becf00b63e41d0d7540212905787
SHA256 2a984837bb7be00caa8937abaa695a72f507252e3ac22157bd6dcd3a4c762da1
MD5 eb352086838f3e62929c6982938257e8
SHA1 190f97f6ca0e1c058506736e0b5b96e1b4a9b6e2
SHA512 55e1bd1a6617928b74b6ec5e04ce49591f650e2a32bd38d396ce919ba59b65a8f3e27c870e71f8740205be2251954a5867a1e11fa8d94af26b0fb5e1d6cd73d2
SSDEEP 6144:+4LuhL2086TbM3v0ofYfyXyqLoittx18a:7mL52v0oiyXy6oCtx18a
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

176377

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winscard

SCardControl

user32

GetMenuStringW SetCapture UnregisterClassA OffsetRect ReleaseDC DestroyWindow CreateWindowExA SetActiveWindow SetTimer LoadStringW SetWindowTextW SetWindowLongW GetSubMenu SetWindowPos CheckMenuItem MessageBeep DestroyIcon GetMenu DrawFocusRect DefWindowProcW CreateWindowExW PostMessageW LoadIconA TrackPopupMenu ClientToScreen RegisterClassW SendMessageW ReleaseCapture DestroyMenu GetCursorPos GetActiveWindow MoveWindow

kernel32

GetTimeZoneInformation GetLocaleInfoW LCMapStringA GetStringTypeW GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA HeapReAlloc HeapAlloc InitializeCriticalSection LoadLibraryExA InterlockedExchange FreeLibrary SetConsoleCtrlHandler OutputDebugStringA Sleep GetACP GetCPInfo EnterCriticalSection FatalAppExitA VirtualProtect RaiseException VirtualQuery GetCurrentProcessId GetEnvironmentStringsW GetCurrentThread GetVersionExA GetCommandLineA GetEnvironmentStrings VirtualAlloc IsDebuggerPresent GetTickCount GetLastError GetProcAddress LoadLibraryW SetHandleCount GetCommandLineW MultiByteToWideChar WideCharToMultiByte LCMapStringW GetOEMCP CreateMutexW GetVersionExW CreateEventW GetModuleHandleW LeaveCriticalSection GetSystemInfo CompareStringA CompareStringW QueryPerformanceCounter HeapFree VirtualFree HeapCreate GetSystemTimeAsFileTime SetEnvironmentVariableA RtlUnwind GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThreadId GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA FreeEnvironmentStringsW GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy

gdi32

CreatePalette

advapi32

RegCreateKeyExA

ole32

OleCreate CoInitialize CoUninitialize

comdlg32

GetSaveFileNameW