14e3803924ef7c0cbf339c8395367d6e479caf53d0e620e9aef828f69bee1eed

Sharing

Copy URL Twitter E-mail

General

Target
14e3803924ef7c0cbf339c8395367d6e479caf53d0e620e9aef828f69bee1eed
Size 665KB
Sample230221-x7nkhagb59
SHA256 14e3803924ef7c0cbf339c8395367d6e479caf53d0e620e9aef828f69bee1eed
MD5 19b731a842025e35de3efa4365adff34
SHA1 86f99872cd1cb14a4488c592db78910065a7477f
SHA512 58bd33f5ad7d0dbf4c374baa45c5ceffb154dae5517b1d1a413ea9114f55bde39dfd2f7a6c3231b04138003eba5c920ef0fb4adbeab522a3e86548d05dfea261
SSDEEP 12288:HLA4dTA0l1LFQzyFaQR7U80E88MALlpi1TtjeYSR28SEqDFLYxqbgH1n6Q:HLfp2yL7U802HLrixVJSR+EqNYx0216Q
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

14e3803924ef7c0cbf339c8395367d6e479caf53d0e620e9aef828f69bee1eed

.exe 665KB

14e3803924ef7c0cbf339c8395367d6e479caf53d0e620e9aef828f69bee1eed

IMPHASH 2ea63b0a2d7d284ede6e5b1ecbc1f123
SHA256 14e3803924ef7c0cbf339c8395367d6e479caf53d0e620e9aef828f69bee1eed
MD5 19b731a842025e35de3efa4365adff34
SHA1 86f99872cd1cb14a4488c592db78910065a7477f
SHA512 58bd33f5ad7d0dbf4c374baa45c5ceffb154dae5517b1d1a413ea9114f55bde39dfd2f7a6c3231b04138003eba5c920ef0fb4adbeab522a3e86548d05dfea261
SSDEEP 12288:HLA4dTA0l1LFQzyFaQR7U80E88MALlpi1TtjeYSR28SEqDFLYxqbgH1n6Q:HLfp2yL7U802HLrixVJSR+EqNYx0216Q
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21657

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoA GetVersionExA OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress GlobalAlloc SetConsoleTitleW DeleteFileA EnumResourceTypesA GetLongPathNameA LoadLibraryW GetBinaryTypeA SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA CommConfigDialogW EnumDateFormatsA SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameW FindNextFileW EnumCalendarInfoW AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc GetComputerNameExW LoadLibraryA RtlUnwind FlushFileBuffers MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile