6589178706a9a2600fa281fbb812f55fe790a27a94ea8cf6fd77c88ab8703b68

Sharing

Copy URL Twitter E-mail

General

Target
6589178706a9a2600fa281fbb812f55fe790a27a94ea8cf6fd77c88ab8703b68
Size 715KB
Sample230217-mdvrlsed8y
SHA256 6589178706a9a2600fa281fbb812f55fe790a27a94ea8cf6fd77c88ab8703b68
MD5 1ec53a299c766db9fb3b32427526bd0b
SHA1 3c57b013ae239b7fa9d329e9e57ac5e99d295996
SHA512 9724a595ab550b732ce8404544cf0a46c37d9ca870e311416a4c9ea1ba5107f6aff1a5c945b60bd1e6d68768116ced3684e6ca193cd00a9ba09608bef562b73b
SSDEEP 12288:ev3Y+8c4tOzvzd4WhIK6it+1zo2LTSLYc5Riqs37z38S5PtAhJJ:ev31J4ah4Wmk+1zTAYcfZsDlALJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6589178706a9a2600fa281fbb812f55fe790a27a94ea8cf6fd77c88ab8703b68

.exe 715KB

6589178706a9a2600fa281fbb812f55fe790a27a94ea8cf6fd77c88ab8703b68

IMPHASH 29a62d14d89b432fd6115525abce5c2c
SHA256 6589178706a9a2600fa281fbb812f55fe790a27a94ea8cf6fd77c88ab8703b68
MD5 1ec53a299c766db9fb3b32427526bd0b
SHA1 3c57b013ae239b7fa9d329e9e57ac5e99d295996
SHA512 9724a595ab550b732ce8404544cf0a46c37d9ca870e311416a4c9ea1ba5107f6aff1a5c945b60bd1e6d68768116ced3684e6ca193cd00a9ba09608bef562b73b
SSDEEP 12288:ev3Y+8c4tOzvzd4WhIK6it+1zo2LTSLYc5Riqs37z38S5PtAhJJ:ev31J4ah4Wmk+1zTAYcfZsDlALJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45007

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateFileW FindActCtxSectionGuid WriteConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationA WaitForSingleObject ReadConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcess OpenEventA CreateFileMappingA GetLocaleInfoW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleA CopyFileA FindResourceA GetBinaryTypeW SetLastError GetProfileSectionW WriteProfileStringW GetConsoleAliasA WritePrivateProfileSectionW SetVolumeMountPointA EnumResourceLanguagesW CommConfigDialogA _hread EnumDateFormatsW ActivateActCtx DeleteVolumeMountPointA WritePrivateProfileStringA GetSystemDirectoryA GetStringTypeA GetLongPathNameA FindNextFileW EnumCalendarInfoA LocalAlloc ReleaseActCtx FindFirstFileA CreateFileA WriteConsoleW LoadLibraryW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError HeapFree RtlUnwind RaiseException DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo HeapAlloc IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW HeapReAlloc HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer

user32

GetMenuBarInfo GetMessageTime

shell32

FindExecutableA

ole32

CoGetInstanceFromIStorage

Name

.text

Size

97KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

585KB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.macije

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gubomuy

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pejorud

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gamefih

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tipira

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ