5e4de4ccd5d68a636fba5bc5f2e9f7c7754264cb22056c1cafcc90468bc407d0

Sharing

Copy URL Twitter E-mail

General

Target
5e4de4ccd5d68a636fba5bc5f2e9f7c7754264cb22056c1cafcc90468bc407d0
Size 670KB
Sample230222-cy7a2ahe48
SHA256 5e4de4ccd5d68a636fba5bc5f2e9f7c7754264cb22056c1cafcc90468bc407d0
MD5 f1da1e2b22c8a7eca0e21b666657775b
SHA1 5741175faa484bd49f4a0bed49261a9724aa19a4
SHA512 99e43e3d3f3ad96997a8f854248ef908a8b929245b26394ff91f99bbe8861bb15c01fbdeed860ca5dc9c7fd38ecb1c1b871428d9f7836608f708cf75a1683cb2
SSDEEP 12288:GOWH2dhu7Lb7n153R3erpyhy0uiAH1E020zVc3mAN2d9G2246At1O/cmdkp:GOTnu7PD153R3erpyhy0kVEMc2AkXG2m
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

5e4de4ccd5d68a636fba5bc5f2e9f7c7754264cb22056c1cafcc90468bc407d0

.exe 670KB

5e4de4ccd5d68a636fba5bc5f2e9f7c7754264cb22056c1cafcc90468bc407d0

IMPHASH 15c60e75bc829640466cb2d348a32c55
SHA256 5e4de4ccd5d68a636fba5bc5f2e9f7c7754264cb22056c1cafcc90468bc407d0
MD5 f1da1e2b22c8a7eca0e21b666657775b
SHA1 5741175faa484bd49f4a0bed49261a9724aa19a4
SHA512 99e43e3d3f3ad96997a8f854248ef908a8b929245b26394ff91f99bbe8861bb15c01fbdeed860ca5dc9c7fd38ecb1c1b871428d9f7836608f708cf75a1683cb2
SSDEEP 12288:GOWH2dhu7Lb7n153R3erpyhy0uiAH1E020zVc3mAN2d9G2246At1O/cmdkp:GOTnu7PD153R3erpyhy0kVEMc2AkXG2m
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22482

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW GetWindowsDirectoryW FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoW GetVersionExA OpenEventW CreateFileMappingA SetLocaleInfoW GetProcAddress LocalAlloc SetConsoleTitleW DeleteFileW EnumResourceTypesA GetLongPathNameA LoadLibraryW GetBinaryTypeA SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA SetDefaultCommConfigA EnumDateFormatsW SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameA VerifyVersionInfoA FindNextFileW EnumCalendarInfoW GlobalAlloc AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc GetComputerNameExW LoadLibraryA RtlUnwind FlushFileBuffers MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile