8337ecb2f7fea499707e63477ee376e74f477d6f702e46e13c1b5c31204feea4

Sharing

Copy URL Twitter E-mail

General

Target
8337ecb2f7fea499707e63477ee376e74f477d6f702e46e13c1b5c31204feea4
Size 664KB
Sample230221-18385agg92
SHA256 8337ecb2f7fea499707e63477ee376e74f477d6f702e46e13c1b5c31204feea4
MD5 65265918b765429783ce5fa95a0622a2
SHA1 1d703e95d884410e5877e90607cdaed2153acd27
SHA512 a12394594b0b64f16923cd87edf49049be43aa58a07a33b25ba6a0435cbbfa818d5d7f065af2a9bdae6b1738fe881dec5c614b26e8c29bfac5bc25014e49780b
SSDEEP 12288:0mGtMjH+UAiYnUtwUJPAv1xEc33YRWHS/EZWZ6AN7gqm7XscZ:0mYUDA9nUtwKDcE/tZ6Alg97Z
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

8337ecb2f7fea499707e63477ee376e74f477d6f702e46e13c1b5c31204feea4

.exe 664KB

8337ecb2f7fea499707e63477ee376e74f477d6f702e46e13c1b5c31204feea4

IMPHASH efd9cdece4321cb4de4c25a0cfc748b8
SHA256 8337ecb2f7fea499707e63477ee376e74f477d6f702e46e13c1b5c31204feea4
MD5 65265918b765429783ce5fa95a0622a2
SHA1 1d703e95d884410e5877e90607cdaed2153acd27
SHA512 a12394594b0b64f16923cd87edf49049be43aa58a07a33b25ba6a0435cbbfa818d5d7f065af2a9bdae6b1738fe881dec5c614b26e8c29bfac5bc25014e49780b
SSDEEP 12288:0mGtMjH+UAiYnUtwUJPAv1xEc33YRWHS/EZWZ6AN7gqm7XscZ:0mYUDA9nUtwKDcE/tZ6Alg97Z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21657

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoA GetVersionExA OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress LocalAlloc SetConsoleTitleW DeleteFileA EnumResourceTypesA GetLongPathNameA LoadLibraryW GetBinaryTypeA SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA CommConfigDialogW EnumDateFormatsA SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameA FindNextFileW EnumCalendarInfoW GlobalAlloc AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc GetComputerNameExW LoadLibraryA RtlUnwind FlushFileBuffers MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile