2c3b05fe5c34359d691d48e004dd9b44c375fdeff195e87869a2537d5528daf7

Sharing

Copy URL Twitter E-mail

General

Target
2c3b05fe5c34359d691d48e004dd9b44c375fdeff195e87869a2537d5528daf7
Size 666KB
Sample230221-vk239she4z
SHA256 2c3b05fe5c34359d691d48e004dd9b44c375fdeff195e87869a2537d5528daf7
MD5 cd132b6695f8cf531ce4137de2b28d18
SHA1 1ad9429dd6dfcbccf88e460e4bad89ce13fe6b73
SHA512 5396621948fd4aa2da6ceb70b390bffb964b8cf2dd177befb8c2edd6354576f24586507fec50b8528db34ddf98a57cb22e7fa26f948b5ea3161ae75847f6cfb2
SSDEEP 12288:FAtoTTOJPZ7B7Yh6DMlA2is6M92Zxpb8CjvFM+iT8hHQW0OjOMl9qi/ZGeyu:FAyHEPtB7Yh42diDG4Db8mlpluO9a6kb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2c3b05fe5c34359d691d48e004dd9b44c375fdeff195e87869a2537d5528daf7

.exe 666KB

2c3b05fe5c34359d691d48e004dd9b44c375fdeff195e87869a2537d5528daf7

IMPHASH 2ea63b0a2d7d284ede6e5b1ecbc1f123
SHA256 2c3b05fe5c34359d691d48e004dd9b44c375fdeff195e87869a2537d5528daf7
MD5 cd132b6695f8cf531ce4137de2b28d18
SHA1 1ad9429dd6dfcbccf88e460e4bad89ce13fe6b73
SHA512 5396621948fd4aa2da6ceb70b390bffb964b8cf2dd177befb8c2edd6354576f24586507fec50b8528db34ddf98a57cb22e7fa26f948b5ea3161ae75847f6cfb2
SSDEEP 12288:FAtoTTOJPZ7B7Yh6DMlA2is6M92Zxpb8CjvFM+iT8hHQW0OjOMl9qi/ZGeyu:FAyHEPtB7Yh42diDG4Db8mlpluO9a6kb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21641

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoA GetVersionExA OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress GlobalAlloc SetConsoleTitleW DeleteFileA EnumResourceTypesA GetLongPathNameA LoadLibraryW GetBinaryTypeA SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA CommConfigDialogW EnumDateFormatsA SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameW FindNextFileW EnumCalendarInfoW AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc GetComputerNameExW LoadLibraryA RtlUnwind FlushFileBuffers MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile