8db67ad6043c25736c24d6b5247f9b5c0babe379ebf26102d33a0ed922a8c2f8

Sharing

Copy URL Twitter E-mail

General

Target
8db67ad6043c25736c24d6b5247f9b5c0babe379ebf26102d33a0ed922a8c2f8
Size 676KB
Sample230218-g2nqbaba99
SHA256 8db67ad6043c25736c24d6b5247f9b5c0babe379ebf26102d33a0ed922a8c2f8
MD5 575e327a6f3e5eeed96eb6da1e538b99
SHA1 2613a72aeab889c3e0f1ca1d8c72f0b5d65ec7ba
SHA512 b1ca0cd5d372e365f63b2e7227ecd613797296f79861aa6b3e6a3bc5ed721634cc4b4d9d488f742782a4b4495e3ea10da0393ae5799c1661c83c500a30c5f112
SSDEEP 12288:wtGtj1J4o4PEqonJmjt+HC1enHfwqRA/k0jNGJWLoTCcEIaI:wtk3l4PPonJO+i1UoqRA/kIssLlIa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

8db67ad6043c25736c24d6b5247f9b5c0babe379ebf26102d33a0ed922a8c2f8

.exe 676KB

8db67ad6043c25736c24d6b5247f9b5c0babe379ebf26102d33a0ed922a8c2f8

IMPHASH 1189c0a2ecbe8fd35560b095ffebf6bd
SHA256 8db67ad6043c25736c24d6b5247f9b5c0babe379ebf26102d33a0ed922a8c2f8
MD5 575e327a6f3e5eeed96eb6da1e538b99
SHA1 2613a72aeab889c3e0f1ca1d8c72f0b5d65ec7ba
SHA512 b1ca0cd5d372e365f63b2e7227ecd613797296f79861aa6b3e6a3bc5ed721634cc4b4d9d488f742782a4b4495e3ea10da0393ae5799c1661c83c500a30c5f112
SSDEEP 12288:wtGtj1J4o4PEqonJmjt+HC1enHfwqRA/k0jNGJWLoTCcEIaI:wtk3l4PPonJO+i1UoqRA/kIssLlIa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30621

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindActCtxSectionGuid ReadConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointW FindFirstChangeNotificationA WaitForSingleObject ReadConsoleInputA VerifyVersionInfoA GetVersionExA GetCurrentProcess OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleA DeleteFileA FindResourceA GetLongPathNameA GetBinaryTypeW SetLastError CreateFileW WriteProfileStringW GetComputerNameExW GetConsoleAliasA WriteProfileSectionW SetVolumeMountPointA EnumResourceLanguagesW CommConfigDialogA EnumDateFormatsA DeleteVolumeMountPointA ZombifyActCtx WritePrivateProfileStringW GetSystemDirectoryA GetStringTypeW GetShortPathNameW VerifyVersionInfoW FindNextFileW EnumCalendarInfoA ReleaseActCtx FindFirstFileW BuildCommDCBAndTimeoutsA WriteConsoleW GetProfileSectionA GetModuleHandleA HeapReAlloc MultiByteToWideChar RaiseException RtlUnwind GetLastError HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent HeapAlloc TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GetCurrentThreadId InterlockedDecrement CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess EnterCriticalSection LeaveCriticalSection HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW LCMapStringW SetFilePointer

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

FindExecutableW

ole32

CoGetInstanceFromFile