8b752fb6be0168bf218bbb2b8560a8fcf2227e0208b979a4e7656e568a08853c

General

Target
8b752fb6be0168bf218bbb2b8560a8fcf2227e0208b979a4e7656e568a08853c
Size 673KB
Sample230223-mtny1afe74
SHA256 8b752fb6be0168bf218bbb2b8560a8fcf2227e0208b979a4e7656e568a08853c
MD5 05c2ad3a05f5d1d00c70b8d9118a93ad
SHA1 a4191491d990c61c49167206e9e1d373aff2b61e
SHA512 fe923b202b53e6fd3c6f3cb38db00e319ec6e884eddaf40a5e496bd7151ac553d61967bb8a658fa2cd8c019c0a012a930dce5b79c386875a64ef5e65da103f11
SSDEEP 12288:ZVIoTDZkG7iapcfN86XRLnCYCyIg1O58pTii7xjqM9U3OwjG30MTblSLvD:ZVTZR7ncfe6XxnCYCyz1O58pTvD9U3OE
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

8b752fb6be0168bf218bbb2b8560a8fcf2227e0208b979a4e7656e568a08853c

.exe 673KB

8b752fb6be0168bf218bbb2b8560a8fcf2227e0208b979a4e7656e568a08853c

IMPHASH 17235106f9016462c1315c5167329419
SHA256 8b752fb6be0168bf218bbb2b8560a8fcf2227e0208b979a4e7656e568a08853c
MD5 05c2ad3a05f5d1d00c70b8d9118a93ad
SHA1 a4191491d990c61c49167206e9e1d373aff2b61e
SHA512 fe923b202b53e6fd3c6f3cb38db00e319ec6e884eddaf40a5e496bd7151ac553d61967bb8a658fa2cd8c019c0a012a930dce5b79c386875a64ef5e65da103f11
SSDEEP 12288:ZVIoTDZkG7iapcfN86XRLnCYCyIg1O58pTii7xjqM9U3OwjG30MTblSLvD:ZVTZR7ncfe6XxnCYCyz1O58pTvD9U3OE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25330

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW GetWindowsDirectoryW FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoW GetVersionExA OpenEventW CreateFileMappingA SetLocaleInfoW GetProcAddress LocalAlloc SetConsoleTitleW DeleteFileW EnumResourceTypesA GetLongPathNameA GetBinaryTypeW SetLastError LocalShrink WriteProfileStringA GetComputerNameExA CreateFileW WriteProfileSectionA GetSystemPowerStatus EnumResourceLanguagesW SetDefaultCommConfigA EnumDateFormatsW ReleaseActCtx SetVolumeMountPointW GetModuleHandleA MoveFileExW WritePrivateProfileStringA GetSystemDirectoryW GetStringTypeW GetShortPathNameA VerifyVersionInfoA FindNextFileW EnumCalendarInfoW GlobalAlloc AddRefActCtx GetLastError WriteConsoleW HeapReAlloc GetConsoleAliasA LoadLibraryA LoadLibraryW MultiByteToWideChar WideCharToMultiByte HeapFree DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind HeapSize

user32

LoadMenuA

advapi32

RevertToSelf

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

8b752fb6be0168bf218bbb2b8560a8fcf2227e0208b979a4e7656e568a08853c

kernel32

user32

advapi32

shell32