468b111227d8507dc206e9185bd1f5c39f5256fb7619db0939cdea73b09faa4a

General

Target
468b111227d8507dc206e9185bd1f5c39f5256fb7619db0939cdea73b09faa4a
Size 706KB
Sample230216-gdht6aga85
SHA256 468b111227d8507dc206e9185bd1f5c39f5256fb7619db0939cdea73b09faa4a
MD5 6698f16c7ba19114051877c9d33eb69f
SHA1 3a0ff9ad37b183f1b3d2d44638ef9ca35134ef1b
SHA512 53acbe8aa7958baa37d4a399f305d5cd3c0c2b1f0cb24b183f531396e0d91932e3fc3140931ad65d5f9259aa319d2c2fc5737242b8e10d1d41f0318092feece7
SSDEEP 12288:7OBO3eefVAGJqUu356xVJF+Suw2Dz3UfhoHBWGoGma02WVvp+2b:7aiPu2uJMVJFl2Dz3UCB1ow0tl
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

468b111227d8507dc206e9185bd1f5c39f5256fb7619db0939cdea73b09faa4a

.exe 706KB

468b111227d8507dc206e9185bd1f5c39f5256fb7619db0939cdea73b09faa4a

IMPHASH 6ccedcfbe9eee8f9056044facdc7d477
SHA256 468b111227d8507dc206e9185bd1f5c39f5256fb7619db0939cdea73b09faa4a
MD5 6698f16c7ba19114051877c9d33eb69f
SHA1 3a0ff9ad37b183f1b3d2d44638ef9ca35134ef1b
SHA512 53acbe8aa7958baa37d4a399f305d5cd3c0c2b1f0cb24b183f531396e0d91932e3fc3140931ad65d5f9259aa319d2c2fc5737242b8e10d1d41f0318092feece7
SSDEEP 12288:7OBO3eefVAGJqUu356xVJF+Suw2Dz3UfhoHBWGoGma02WVvp+2b:7aiPu2uJMVJFl2Dz3UCB1ow0tl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26559

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MapUserPhysicalPages DeleteVolumeMountPointA InterlockedIncrement OpenJobObjectA SetMailslotInfo InterlockedCompareExchange GetFileAttributesExA MoveFileWithProgressA GetModuleHandleW GetCurrentThread GetConsoleAliasesA GetNumberFormatA GetConsoleTitleA SetFileShortNameW ReadConsoleInputA GetGeoInfoA CreateActCtxA GetBinaryTypeW GetACP GetStartupInfoW GetLastError SetLastError GetProcAddress GetConsoleAliasExesLengthA RemoveDirectoryA DisableThreadLibraryCalls OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter GetProcessWorkingSetSize LocalAlloc CreateTapePartition IsSystemResumeAutomatic FindFirstChangeNotificationA HeapSetInformation GetConsoleCursorInfo GetVersionExA GetCurrentProcessId InitializeCriticalSectionAndSpinCount HeapSize GetModuleHandleA GetNumaProcessorNode GetNativeSystemInfo VirtualAlloc HeapReAlloc MultiByteToWideChar TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetCPInfo InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW LeaveCriticalSection EnterCriticalSection GetLocaleInfoA

user32

SetCaretPos IsChild RealGetWindowClassA LoadMenuA CharUpperA GetCursorInfo CharLowerBuffA ClipCursor GetKeyNameTextW

advapi32

LogonUserW IsValidAcl ReportEventA

ole32

CoRevokeMallocSpy

Sharing

General

Malware Config

Signatures

File Explorer

468b111227d8507dc206e9185bd1f5c39f5256fb7619db0939cdea73b09faa4a

kernel32

user32

advapi32

ole32