da1d55245fc069814f37fb0268d2b12777f0e028bae80d0ebf0e405562ff35d9

Sharing

Copy URL Twitter E-mail

General

Target
da1d55245fc069814f37fb0268d2b12777f0e028bae80d0ebf0e405562ff35d9
Size 665KB
Sample230221-vz9fwsff85
SHA256 da1d55245fc069814f37fb0268d2b12777f0e028bae80d0ebf0e405562ff35d9
MD5 63e055dd0cf821240262820b92627311
SHA1 474b55a29207216afbd5aa16a88e55238e326196
SHA512 a049b3f44610622fc43bb3e96d459f3716407cc263e7fb0f8e159179ffd3552ffd613a27a13fed681a6e460f50dbebc7fd892e6e3d4fa8aa50285eb38b997483
SSDEEP 12288:t513mUNKoZa9538xoiaauQa1hAEl8E6jXNcW2KfSIxZYBkDP71kPw:t5x13AD38TvuQkhAEl87XNn2KfSIxZYp
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

da1d55245fc069814f37fb0268d2b12777f0e028bae80d0ebf0e405562ff35d9

.exe 665KB

da1d55245fc069814f37fb0268d2b12777f0e028bae80d0ebf0e405562ff35d9

IMPHASH 2ea63b0a2d7d284ede6e5b1ecbc1f123
SHA256 da1d55245fc069814f37fb0268d2b12777f0e028bae80d0ebf0e405562ff35d9
MD5 63e055dd0cf821240262820b92627311
SHA1 474b55a29207216afbd5aa16a88e55238e326196
SHA512 a049b3f44610622fc43bb3e96d459f3716407cc263e7fb0f8e159179ffd3552ffd613a27a13fed681a6e460f50dbebc7fd892e6e3d4fa8aa50285eb38b997483
SSDEEP 12288:t513mUNKoZa9538xoiaauQa1hAEl8E6jXNcW2KfSIxZYBkDP71kPw:t5x13AD38TvuQkhAEl87XNn2KfSIxZYp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21657

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoA GetVersionExA OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress GlobalAlloc SetConsoleTitleW DeleteFileA EnumResourceTypesA GetLongPathNameA LoadLibraryW GetBinaryTypeA SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA CommConfigDialogW EnumDateFormatsA SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameW FindNextFileW EnumCalendarInfoW AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc GetComputerNameExW LoadLibraryA RtlUnwind FlushFileBuffers MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile