5648df65aa328cf5505db3661fcbcd7ae8006b0cd9532c799287a6c0b111bbc5

Sharing

Copy URL Twitter E-mail

General

Target
5648df65aa328cf5505db3661fcbcd7ae8006b0cd9532c799287a6c0b111bbc5
Size 676KB
Sample230218-ctk71aaa7w
SHA256 5648df65aa328cf5505db3661fcbcd7ae8006b0cd9532c799287a6c0b111bbc5
MD5 211df725e40c83451f7973c0b38d223c
SHA1 3a2c4a0e8949ab9dd302f4e3cad0178a16ae0434
SHA512 a271a1f34f30cd7ea26690a0ef0854ebdb06b3a09dfbb181662d37f492f05161945f614dbb023113daa858a5ac38c743412019d359d9bf2effbe320d5d0fcf6f
SSDEEP 12288:6jQt2IHATjouevS0tHyWjNTsgbTBtgP9t0tCHoVMDPT+XQ9K7kdW2uo7rc:6jQMfevPRRVDgz0AHomPgkz7r
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

5648df65aa328cf5505db3661fcbcd7ae8006b0cd9532c799287a6c0b111bbc5

.exe 676KB

5648df65aa328cf5505db3661fcbcd7ae8006b0cd9532c799287a6c0b111bbc5

IMPHASH 1189c0a2ecbe8fd35560b095ffebf6bd
SHA256 5648df65aa328cf5505db3661fcbcd7ae8006b0cd9532c799287a6c0b111bbc5
MD5 211df725e40c83451f7973c0b38d223c
SHA1 3a2c4a0e8949ab9dd302f4e3cad0178a16ae0434
SHA512 a271a1f34f30cd7ea26690a0ef0854ebdb06b3a09dfbb181662d37f492f05161945f614dbb023113daa858a5ac38c743412019d359d9bf2effbe320d5d0fcf6f
SSDEEP 12288:6jQt2IHATjouevS0tHyWjNTsgbTBtgP9t0tCHoVMDPT+XQ9K7kdW2uo7rc:6jQMfevPRRVDgz0AHomPgkz7r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30605

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionGuid ReadConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointW FindFirstChangeNotificationA WaitForSingleObject ReadConsoleInputA VerifyVersionInfoA GetVersionExA GetCurrentProcess OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleA DeleteFileA FindResourceA GetLongPathNameA GetBinaryTypeW SetLastError CreateFileW WriteProfileStringW GetComputerNameExW GetConsoleAliasA WriteProfileSectionW SetVolumeMountPointA EnumResourceLanguagesW CommConfigDialogA EnumDateFormatsA DeleteVolumeMountPointA ZombifyActCtx WritePrivateProfileStringW GetSystemDirectoryA GetStringTypeW GetShortPathNameW VerifyVersionInfoW FindNextFileW EnumCalendarInfoA ReleaseActCtx FindFirstFileW BuildCommDCBAndTimeoutsA WriteConsoleW GetProfileSectionA GetModuleHandleA HeapReAlloc MultiByteToWideChar RaiseException RtlUnwind GetLastError HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent HeapAlloc TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess EnterCriticalSection LeaveCriticalSection HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW LCMapStringW SetFilePointer

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

FindExecutableW

ole32

CoGetInstanceFromFile