4900e1dfd6cf81b5777329dbfa0281b5ddd20627f87abed1dc89095ff0c5edb4

General

Target
4900e1dfd6cf81b5777329dbfa0281b5ddd20627f87abed1dc89095ff0c5edb4
Size 700KB
Sample230301-k7yn9afe66
SHA256 4900e1dfd6cf81b5777329dbfa0281b5ddd20627f87abed1dc89095ff0c5edb4
MD5 b37dbbda5cccadaf790a2f4ba521655c
SHA1 ff1b5b752b332e58fa677f94439b6794163845cc
SHA512 6a12f635653846488adc8c228aca1e4fd317f15210c7f74397148cf61a58d88128f18e40bf52bd51acc18447b63143e7fec2ec20c9b481475733f6b0bb35067a
SSDEEP 12288:BTrSALLMFjbd4ZoBt6pC1ImD7DAf6SPddH6jUx2JKcS3wmxk8ibCmn3tdM0/Poyc:JrSAOjGZoBhIcDo3PdZ6jUxMtO28Lm3L
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4900e1dfd6cf81b5777329dbfa0281b5ddd20627f87abed1dc89095ff0c5edb4

.exe 700KB

4900e1dfd6cf81b5777329dbfa0281b5ddd20627f87abed1dc89095ff0c5edb4

IMPHASH 6744e6dbe648effa9a7b038219038af5
SHA256 4900e1dfd6cf81b5777329dbfa0281b5ddd20627f87abed1dc89095ff0c5edb4
MD5 b37dbbda5cccadaf790a2f4ba521655c
SHA1 ff1b5b752b332e58fa677f94439b6794163845cc
SHA512 6a12f635653846488adc8c228aca1e4fd317f15210c7f74397148cf61a58d88128f18e40bf52bd51acc18447b63143e7fec2ec20c9b481475733f6b0bb35067a
SSDEEP 12288:BTrSALLMFjbd4ZoBt6pC1ImD7DAf6SPddH6jUx2JKcS3wmxk8ibCmn3tdM0/Poyc:JrSAOjGZoBhIcDo3PdZ6jUxMtO28Lm3L
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21929

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReleaseMutex ReadConsoleInputA VerifyVersionInfoW GetCPInfoExA OpenEventA SetLocaleInfoA GetProcAddress LocalAlloc DeleteFileA EnumResourceTypesW GetBinaryTypeW SetLastError LocalFlags WriteProfileStringA GetComputerNameExA GetConsoleAliasA WriteProfileSectionW FindFirstVolumeMountPointW SetVolumeMountPointW GetModuleHandleW EnumResourceLanguagesW SetDefaultCommConfigW EnumDateFormatsA DeactivateActCtx DeleteVolumeMountPointW GetStartupInfoA CreateJobSet WritePrivateProfileStringA FoldStringA GetShortPathNameA VerifyVersionInfoA FindNextFileA EnumCalendarInfoA CreateEventW GetLastError WriteConsoleInputW GetWindowsDirectoryA GetSystemPowerStatus LoadLibraryA MultiByteToWideChar HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapCreate HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException WideCharToMultiByte LCMapStringW GetStringTypeW Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind LoadLibraryW WriteConsoleW SetFilePointer HeapSize CreateFileW

gdi32

GetBoundsRect

advapi32

SetKernelObjectSecurity

Sharing

General

Malware Config

Signatures

File Explorer

4900e1dfd6cf81b5777329dbfa0281b5ddd20627f87abed1dc89095ff0c5edb4

kernel32

gdi32

advapi32