2d3831dac3a537ef1e27b876bb45308f9b4a0d00aa25e319877a7607af2daf31

Sharing

Copy URL Twitter E-mail

General

Target
2d3831dac3a537ef1e27b876bb45308f9b4a0d00aa25e319877a7607af2daf31
Size 665KB
Sample230221-vcblcafe57
SHA256 2d3831dac3a537ef1e27b876bb45308f9b4a0d00aa25e319877a7607af2daf31
MD5 ced6b406441ac0c0c3aa50794e2f9384
SHA1 91776e0c478e16469fc568c06fe6c300bf35716f
SHA512 2e23bc1a165629b18dc0ec8180a6b7ed9c691a15d890c7d06f1af2c4f02d4cbbbed17cad2d27dc1da9000f77ab02cfdca9f4e023c48aa43958e730104f8fb375
SSDEEP 12288:6yYWWl5hx96p7w/XIMLbeNwwcxlc+7LQbuGI4eydMsf4I4+oua9HCMrvcAO:6ypQrC7w/KNwwF+PQbuqegf4x+zafcAO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2d3831dac3a537ef1e27b876bb45308f9b4a0d00aa25e319877a7607af2daf31

.exe 665KB

2d3831dac3a537ef1e27b876bb45308f9b4a0d00aa25e319877a7607af2daf31

IMPHASH 790bdd9e679834c1a47d29f7e0239c92
SHA256 2d3831dac3a537ef1e27b876bb45308f9b4a0d00aa25e319877a7607af2daf31
MD5 ced6b406441ac0c0c3aa50794e2f9384
SHA1 91776e0c478e16469fc568c06fe6c300bf35716f
SHA512 2e23bc1a165629b18dc0ec8180a6b7ed9c691a15d890c7d06f1af2c4f02d4cbbbed17cad2d27dc1da9000f77ab02cfdca9f4e023c48aa43958e730104f8fb375
SSDEEP 12288:6yYWWl5hx96p7w/XIMLbeNwwcxlc+7LQbuGI4eydMsf4I4+oua9HCMrvcAO:6ypQrC7w/KNwwF+PQbuqegf4x+zafcAO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21657

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoA GetVersionExA OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress GlobalAlloc SetConsoleTitleW DeleteFileA EnumResourceTypesA GetLongPathNameA GetBinaryTypeW SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA CommConfigDialogW EnumDateFormatsA SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameW FindNextFileW EnumCalendarInfoW AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc LoadLibraryW GetComputerNameExW LoadLibraryA RtlUnwind MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile