9203ba6387a98a3f3c2eb90c4949482e79561166a3d8d2ad77d5b16832eb24ab

Sharing

Copy URL Twitter E-mail

General

Target
9203ba6387a98a3f3c2eb90c4949482e79561166a3d8d2ad77d5b16832eb24ab
Size 670KB
Sample230222-cw8fbabd3y
SHA256 9203ba6387a98a3f3c2eb90c4949482e79561166a3d8d2ad77d5b16832eb24ab
MD5 8890237d990ab4537d1ad634ce20ab01
SHA1 9c1c5815c4f19d6fe19afa226671f7f8cb3b27a3
SHA512 507a3983095ea4919ed1f1143117a272b9d9bbc8a216007f7c5907e4a8a8fa34c5c973f4c13f8b77122d3580fb420293a1e6de452eb4767382a8f61069a78adf
SSDEEP 12288:tP5SZK5FUkLEOlUk77OWaX/SKJu08/NDxni6ERC5:tPeK5tCk/KXKIR87izU
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9203ba6387a98a3f3c2eb90c4949482e79561166a3d8d2ad77d5b16832eb24ab

.exe 670KB

9203ba6387a98a3f3c2eb90c4949482e79561166a3d8d2ad77d5b16832eb24ab

IMPHASH 15c60e75bc829640466cb2d348a32c55
SHA256 9203ba6387a98a3f3c2eb90c4949482e79561166a3d8d2ad77d5b16832eb24ab
MD5 8890237d990ab4537d1ad634ce20ab01
SHA1 9c1c5815c4f19d6fe19afa226671f7f8cb3b27a3
SHA512 507a3983095ea4919ed1f1143117a272b9d9bbc8a216007f7c5907e4a8a8fa34c5c973f4c13f8b77122d3580fb420293a1e6de452eb4767382a8f61069a78adf
SSDEEP 12288:tP5SZK5FUkLEOlUk77OWaX/SKJu08/NDxni6ERC5:tPeK5tCk/KXKIR87izU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22466

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW GetWindowsDirectoryW FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoW GetVersionExA OpenEventW CreateFileMappingA SetLocaleInfoW GetProcAddress LocalAlloc SetConsoleTitleW DeleteFileW EnumResourceTypesA GetLongPathNameA LoadLibraryW GetBinaryTypeA SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA SetDefaultCommConfigA EnumDateFormatsW SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameA VerifyVersionInfoA FindNextFileW EnumCalendarInfoW GlobalAlloc AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc GetComputerNameExW LoadLibraryA RtlUnwind FlushFileBuffers MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile