db2d7523b032a07d2d97b209c26b3d69b67925b42c4c89c9334ee9e80d095f8f

Sharing

Copy URL Twitter E-mail

General

Target
db2d7523b032a07d2d97b209c26b3d69b67925b42c4c89c9334ee9e80d095f8f
Size 665KB
Sample230221-yyasqagd38
SHA256 db2d7523b032a07d2d97b209c26b3d69b67925b42c4c89c9334ee9e80d095f8f
MD5 756fbb1a6c6d645717f4d0213eb6626f
SHA1 8c786097e8d890f49495d0c8fa5bc5848612f9ea
SHA512 334fce2eabe62da0a45003f763c617157777e7e1684a42772b89daca06faac89e31ad8bdceec313e4b79bf40a175c68f0fa5786596a5eb249daf19240b719be4
SSDEEP 12288:bTZiy4bGVjYL1dhx3UQkdeUf6SzkEd7SfYUILs8Fdwlrtlve03JU4sb:bT8youvQk7fnUILleO4sb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

db2d7523b032a07d2d97b209c26b3d69b67925b42c4c89c9334ee9e80d095f8f

.exe 665KB

db2d7523b032a07d2d97b209c26b3d69b67925b42c4c89c9334ee9e80d095f8f

IMPHASH efd9cdece4321cb4de4c25a0cfc748b8
SHA256 db2d7523b032a07d2d97b209c26b3d69b67925b42c4c89c9334ee9e80d095f8f
MD5 756fbb1a6c6d645717f4d0213eb6626f
SHA1 8c786097e8d890f49495d0c8fa5bc5848612f9ea
SHA512 334fce2eabe62da0a45003f763c617157777e7e1684a42772b89daca06faac89e31ad8bdceec313e4b79bf40a175c68f0fa5786596a5eb249daf19240b719be4
SSDEEP 12288:bTZiy4bGVjYL1dhx3UQkdeUf6SzkEd7SfYUILs8Fdwlrtlve03JU4sb:bT8youvQk7fnUILleO4sb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21657

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoA GetVersionExA OpenEventA CreateFileMappingA SetLocaleInfoW GetProcAddress LocalAlloc SetConsoleTitleW DeleteFileA EnumResourceTypesA GetLongPathNameA LoadLibraryW GetBinaryTypeA SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA CommConfigDialogW EnumDateFormatsA SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameA FindNextFileW EnumCalendarInfoW GlobalAlloc AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc GetComputerNameExW LoadLibraryA RtlUnwind FlushFileBuffers MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile