33a2b7e295ba1c67cc13ef53d8e4de959ae5484a92b6adfe5b948c9f11bd1c8c

Sharing

Copy URL Twitter E-mail

General

Target
33a2b7e295ba1c67cc13ef53d8e4de959ae5484a92b6adfe5b948c9f11bd1c8c
Size 693KB
Sample230217-q2rawaff67
SHA256 33a2b7e295ba1c67cc13ef53d8e4de959ae5484a92b6adfe5b948c9f11bd1c8c
MD5 338e61cabd0c46dc3424033b5e73f672
SHA1 46d4338e8b6bbbb17f0c5318e4775ba66ec31f77
SHA512 f4954b4b740cd4fa348e168fc57e88fee7175b8afd2f43d2464d071db0fb126448a05e08da52a46ba9d403fe69f97f1795cf75c4963dd9ca02be87971eb65278
SSDEEP 12288:XhHq2Tv6UXqwpm8g941kF9UHZ0MDAKAqHiHmuOl+buq4pMBZWb0YGItAzLpr0y1b:XhHp17D1kF96ZNAcCHv6sFVuzGp1b
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

33a2b7e295ba1c67cc13ef53d8e4de959ae5484a92b6adfe5b948c9f11bd1c8c

.exe 693KB

33a2b7e295ba1c67cc13ef53d8e4de959ae5484a92b6adfe5b948c9f11bd1c8c

IMPHASH 9d64e6a2a7bb4f74b24f7b7e42936433
SHA256 33a2b7e295ba1c67cc13ef53d8e4de959ae5484a92b6adfe5b948c9f11bd1c8c
MD5 338e61cabd0c46dc3424033b5e73f672
SHA1 46d4338e8b6bbbb17f0c5318e4775ba66ec31f77
SHA512 f4954b4b740cd4fa348e168fc57e88fee7175b8afd2f43d2464d071db0fb126448a05e08da52a46ba9d403fe69f97f1795cf75c4963dd9ca02be87971eb65278
SSDEEP 12288:XhHq2Tv6UXqwpm8g941kF9UHZ0MDAKAqHiHmuOl+buq4pMBZWb0YGItAzLpr0y1b:XhHp17D1kF96ZNAcCHv6sFVuzGp1b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43708

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionGuid ReadConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationA WaitForSingleObject ReadConsoleInputA VerifyVersionInfoA GetVersionExA GetCurrentProcess OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleA DeleteFileA FindResourceA GetBinaryTypeW SetLastError CreateFileW WriteProfileStringW GetComputerNameExW GetConsoleAliasA WriteProfileSectionW SetVolumeMountPointA EnumResourceLanguagesW CommConfigDialogA EnumDateFormatsW ActivateActCtx DeleteVolumeMountPointA WritePrivateProfileStringW GetSystemDirectoryA GetStringTypeW GetLongPathNameA FindNextFileW EnumCalendarInfoA ReleaseActCtx FindFirstFileW CreateFileA WriteConsoleW LoadLibraryW GetProfileSectionW GetModuleHandleA FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError HeapFree RtlUnwind RaiseException GetCommandLineW HeapSetInformation GetStartupInfoW WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo HeapAlloc IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoW HeapReAlloc HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

FindExecutableA

ole32

CoGetInstanceFromIStorage