0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474

General

Target
0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474
Size 330KB
Sample230129-yd4v3acf61
SHA256 0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474
MD5 f496c839f762140fc275be29a1307efe
SHA1 b60b56caef87f24d07db7313d2e90011b662cb68
SHA512 0a2c6052bbaf5b4bfbd310f73ab4d967956f3bb4cd37503a9ac58e2a181b6255864710565fd4be65f2302eaca5f5789e8993da8bd4687dc906485890e1e7e068
SSDEEP 6144:vjyPFc4tqecJ1+bKK8OPdCb7YuJNpas5wV9Su8AxVqAm:7R4tzgYbF8OPd0zJNss6GAWA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474

.exe 330KB

0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474

IMPHASH 60e3d9e7d06d8ec3f7412822e5bd4f3f
SHA256 0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474
MD5 f496c839f762140fc275be29a1307efe
SHA1 b60b56caef87f24d07db7313d2e90011b662cb68
SHA512 0a2c6052bbaf5b4bfbd310f73ab4d967956f3bb4cd37503a9ac58e2a181b6255864710565fd4be65f2302eaca5f5789e8993da8bd4687dc906485890e1e7e068
SSDEEP 6144:vjyPFc4tqecJ1+bKK8OPdCb7YuJNpas5wV9Su8AxVqAm:7R4tzgYbF8OPd0zJNss6GAWA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18016

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess FindResourceA GetModuleHandleExA MapUserPhysicalPages LoadResource HeapAlloc LoadLibraryExW GetCurrentProcess ZombifyActCtx HeapFree GetTimeFormatA GetTickCount FindNextVolumeMountPointA GetConsoleAliasesA GetLocaleInfoW GetFileAttributesA CreateJobObjectA GetProcAddress GetAtomNameA LocalAlloc SetConsoleCtrlHandler SetConsoleDisplayMode GetModuleHandleA lstrcatW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException RtlUnwind TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetLastError DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA HeapDestroy HeapCreate VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage SetFilePointer MultiByteToWideChar InitializeCriticalSectionAndSpinCount LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474

kernel32