62705fadfb065094af0d2f626247c4c6eb68a9d4120215d9172e5e0eb3a7571e

Sharing

Copy URL Twitter E-mail

General

Target
62705fadfb065094af0d2f626247c4c6eb68a9d4120215d9172e5e0eb3a7571e
Size 716KB
Sample230217-ms6sesfa42
SHA256 62705fadfb065094af0d2f626247c4c6eb68a9d4120215d9172e5e0eb3a7571e
MD5 e54ae4c8a68d9bb0b8e04bae12af7aa2
SHA1 e4add6a96dec78af50508a511154a7675d82cc34
SHA512 5d4d0fcc69299da6872e977542b748df0b4d13e2f77ba2dc3e4b809b80a56675ce5ada4c6e0e85339471c54a4e73f3e67dc78ad074d0606307fbdf0621a827a1
SSDEEP 12288:An4/FMTuxVkjT5wo99CfiCS5CDuisq61IWxVXO12cuukKDSPz3at:An4dS4VkjTqhfzJY7FTkyPzqt
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

62705fadfb065094af0d2f626247c4c6eb68a9d4120215d9172e5e0eb3a7571e

.exe 716KB

62705fadfb065094af0d2f626247c4c6eb68a9d4120215d9172e5e0eb3a7571e

IMPHASH 29a62d14d89b432fd6115525abce5c2c
SHA256 62705fadfb065094af0d2f626247c4c6eb68a9d4120215d9172e5e0eb3a7571e
MD5 e54ae4c8a68d9bb0b8e04bae12af7aa2
SHA1 e4add6a96dec78af50508a511154a7675d82cc34
SHA512 5d4d0fcc69299da6872e977542b748df0b4d13e2f77ba2dc3e4b809b80a56675ce5ada4c6e0e85339471c54a4e73f3e67dc78ad074d0606307fbdf0621a827a1
SSDEEP 12288:An4/FMTuxVkjT5wo99CfiCS5CDuisq61IWxVXO12cuukKDSPz3at:An4dS4VkjTqhfzJY7FTkyPzqt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45007

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateFileW FindActCtxSectionGuid WriteConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationA WaitForSingleObject ReadConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcess OpenEventA CreateFileMappingA GetLocaleInfoW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleA CopyFileA FindResourceA GetBinaryTypeW SetLastError GetProfileSectionW WriteProfileStringW GetConsoleAliasA WritePrivateProfileSectionW SetVolumeMountPointA EnumResourceLanguagesW CommConfigDialogA _hread EnumDateFormatsW ActivateActCtx DeleteVolumeMountPointA WritePrivateProfileStringA GetSystemDirectoryA GetStringTypeA GetLongPathNameA FindNextFileW EnumCalendarInfoA LocalAlloc ReleaseActCtx FindFirstFileA CreateFileA WriteConsoleW LoadLibraryW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError HeapFree RtlUnwind RaiseException DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo HeapAlloc IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW HeapReAlloc HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer

user32

GetMenuBarInfo GetMessageTime

shell32

FindExecutableA

ole32

CoGetInstanceFromIStorage

Name

.text

Size

97KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

586KB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kid

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.daki

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vewe

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wulo

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fasoku

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ