9a7e02df1bea2e9b16b8ee7c51da5ed9a11c272d5a03df6dc6871285d0a6fd09

Sharing

Copy URL Twitter E-mail

General

Target
9a7e02df1bea2e9b16b8ee7c51da5ed9a11c272d5a03df6dc6871285d0a6fd09
Size 715KB
Sample230217-h7k22sec64
SHA256 9a7e02df1bea2e9b16b8ee7c51da5ed9a11c272d5a03df6dc6871285d0a6fd09
MD5 42e387861bf0201233730279dc9319fb
SHA1 64eda2a134f91277935e0bd468a850ed80790c9c
SHA512 dfe46be83d2d78c496951fb5aa5001b1199c9e589fed6d84cf6a0d120774c4bc26880b7d9c1a57d3b40947c0f0b8d744db3a6741b9e549022fc3960bccdf7e72
SSDEEP 12288:XHWs90rZRy1sKzhqhZyMKrFWS09RKxwV6fFVrgSlEzePnw0ebEiNqDkS9KzuNlF:XHWqeZRir0sMk63hcfzlaelmbNwKS3F
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9a7e02df1bea2e9b16b8ee7c51da5ed9a11c272d5a03df6dc6871285d0a6fd09

.exe 715KB

9a7e02df1bea2e9b16b8ee7c51da5ed9a11c272d5a03df6dc6871285d0a6fd09

IMPHASH 29a62d14d89b432fd6115525abce5c2c
SHA256 9a7e02df1bea2e9b16b8ee7c51da5ed9a11c272d5a03df6dc6871285d0a6fd09
MD5 42e387861bf0201233730279dc9319fb
SHA1 64eda2a134f91277935e0bd468a850ed80790c9c
SHA512 dfe46be83d2d78c496951fb5aa5001b1199c9e589fed6d84cf6a0d120774c4bc26880b7d9c1a57d3b40947c0f0b8d744db3a6741b9e549022fc3960bccdf7e72
SSDEEP 12288:XHWs90rZRy1sKzhqhZyMKrFWS09RKxwV6fFVrgSlEzePnw0ebEiNqDkS9KzuNlF:XHWqeZRir0sMk63hcfzlaelmbNwKS3F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45007

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateFileW FindActCtxSectionGuid WriteConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationA WaitForSingleObject ReadConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcess OpenEventA CreateFileMappingA GetLocaleInfoW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleA CopyFileA FindResourceA GetBinaryTypeW SetLastError GetProfileSectionW WriteProfileStringW GetConsoleAliasA WritePrivateProfileSectionW SetVolumeMountPointA EnumResourceLanguagesW CommConfigDialogA _hread EnumDateFormatsW ActivateActCtx DeleteVolumeMountPointA WritePrivateProfileStringA GetSystemDirectoryA GetStringTypeA GetLongPathNameA FindNextFileW EnumCalendarInfoA LocalAlloc ReleaseActCtx FindFirstFileA CreateFileA WriteConsoleW LoadLibraryW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError HeapFree RtlUnwind RaiseException DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo HeapAlloc IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW HeapReAlloc HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer

user32

GetMenuBarInfo GetMessageTime

shell32

FindExecutableA

ole32

CoGetInstanceFromIStorage

Name

.text

Size

97KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

585KB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.piko

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.babawe

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wexaniz

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wocoja

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yuxok

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ