489f8c63e0102042340dd432e22ad092abb4f8c0d23d41df2ddd38eb62305f5c

General

Target
489f8c63e0102042340dd432e22ad092abb4f8c0d23d41df2ddd38eb62305f5c
Size 713KB
Sample230216-av722seh77
SHA256 489f8c63e0102042340dd432e22ad092abb4f8c0d23d41df2ddd38eb62305f5c
MD5 62f370d2d216837785635bedc7dbc783
SHA1 691ba4be30f8226b0ef8de15482b610933fd185b
SHA512 2fa3e08f3d8f9001e1cfa0e8729df30dc0348faf445d067ebc28a10d13b2b8e5df81bf8ec6153e125caca970fa2eda65533cd02416d77af50e1ba2bbbeeca824
SSDEEP 12288:pPmXz7hL9JJQfBrO0W3aSxikrz0bngahfE0cTniQxHzO6C3wmyZrd:pPI7hL9DMrOT3amef7uiEaTwmyZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

489f8c63e0102042340dd432e22ad092abb4f8c0d23d41df2ddd38eb62305f5c

.exe 713KB

489f8c63e0102042340dd432e22ad092abb4f8c0d23d41df2ddd38eb62305f5c

IMPHASH e4a81217ceeca700511172936e540786
SHA256 489f8c63e0102042340dd432e22ad092abb4f8c0d23d41df2ddd38eb62305f5c
MD5 62f370d2d216837785635bedc7dbc783
SHA1 691ba4be30f8226b0ef8de15482b610933fd185b
SHA512 2fa3e08f3d8f9001e1cfa0e8729df30dc0348faf445d067ebc28a10d13b2b8e5df81bf8ec6153e125caca970fa2eda65533cd02416d77af50e1ba2bbbeeca824
SSDEEP 12288:pPmXz7hL9JJQfBrO0W3aSxikrz0bngahfE0cTniQxHzO6C3wmyZrd:pPI7hL9DMrOT3amef7uiEaTwmyZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44455

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateFileA FindActCtxSectionGuid WriteConsoleInputA GetWindowsDirectoryA FindFirstVolumeMountPointA CreateDirectoryExW GlobalFlags WaitForSingleObject ReadConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcess OpenEventW CreateFileMappingA GetLocaleInfoW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleA CopyFileA FindResourceA SetPriorityClass SetLastError GetProfileSectionW WriteProfileStringW GetConsoleAliasA WritePrivateProfileSectionA SetVolumeMountPointW EnumResourceLanguagesW TransactNamedPipe _hread EnumDateFormatsW ActivateActCtx DeleteVolumeMountPointA WritePrivateProfileStringA GetSystemDirectoryA GetStringTypeA GetLongPathNameA FindNextFileW EnumCalendarInfoA LocalAlloc ReleaseActCtx SetCriticalSectionSpinCount SetFilePointer WriteConsoleW LoadLibraryW FlushFileBuffers GetConsoleMode GetConsoleCP InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError HeapFree RtlUnwind RaiseException DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo HeapAlloc IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW HeapReAlloc HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetStdHandle CreateFileW

user32

GetMenuBarInfo GetMessageTime

shell32

FindExecutableA

ole32

CoGetInstanceFromIStorage

Name

.text

Size

96KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

586KB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nehu

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gak

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bajajem

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sef

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

489f8c63e0102042340dd432e22ad092abb4f8c0d23d41df2ddd38eb62305f5c

kernel32

user32

shell32

ole32