866ca7bbedfd8f7cda2ae38d7db6ec0a3cb2a52b2b6c574038f492df5f8df276

Sharing

Copy URL Twitter E-mail

General

Target
866ca7bbedfd8f7cda2ae38d7db6ec0a3cb2a52b2b6c574038f492df5f8df276
Size 460KB
Sample230311-wl38dsag32
SHA256 866ca7bbedfd8f7cda2ae38d7db6ec0a3cb2a52b2b6c574038f492df5f8df276
MD5 c1cd6c3fdf8cee19295dd9419ebc80a9
SHA1 1d251cd49b9df8da339130341dc73581f8bd92e6
SHA512 078401a902bbe5a79c30049e8f65aac4cf5ee481edf44134fb8e87a305e14c7b2b46a858d2af1b06bf8030669ee0b2089aa50b6d52a34e3990634d96372abb1d
SSDEEP 12288:gysmcMyDKT7PXWmp4y6vipy6gAg9W5Lr9c:f2W7PXWI4y6viHbvK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

866ca7bbedfd8f7cda2ae38d7db6ec0a3cb2a52b2b6c574038f492df5f8df276

.exe 460KB

866ca7bbedfd8f7cda2ae38d7db6ec0a3cb2a52b2b6c574038f492df5f8df276

IMPHASH 498ce63ad5da17e4362994ba9a6fc26b
SHA256 866ca7bbedfd8f7cda2ae38d7db6ec0a3cb2a52b2b6c574038f492df5f8df276
MD5 c1cd6c3fdf8cee19295dd9419ebc80a9
SHA1 1d251cd49b9df8da339130341dc73581f8bd92e6
SHA512 078401a902bbe5a79c30049e8f65aac4cf5ee481edf44134fb8e87a305e14c7b2b46a858d2af1b06bf8030669ee0b2089aa50b6d52a34e3990634d96372abb1d
SSDEEP 12288:gysmcMyDKT7PXWmp4y6vipy6gAg9W5Lr9c:f2W7PXWI4y6viHbvK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15932

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleInputW VerifyVersionInfoW GetCPInfoExA CreateEventW GetSystemDirectoryW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer OpenWaitableTimerA GetFileAttributesW EnumResourceTypesW GetLongPathNameW GetModuleHandleW SetThreadLocale InterlockedCompareExchange FindNextFileA LocalFlags WaitCommEvent GetComputerNameExW GetConsoleAliasW PulseEvent WriteProfileSectionW GetLastError GetConsoleMode AssignProcessToJobObject SetCalendarInfoA QueryInformationJobObject GetComputerNameW EnumTimeFormatsA AddAtomA SetSystemTime _llseek GetShortPathNameW EnumCalendarInfoA EnumCalendarInfoExW FindNextFileW CreateActCtxW SetStdHandle GetWindowsDirectoryW FindFirstVolumeMountPointW WritePrivateProfileSectionW LoadLibraryW WriteConsoleW CloseHandle HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer HeapCreate HeapFree ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte HeapSize GetConsoleCP FlushFileBuffers IsProcessorFeaturePresent LCMapStringW GetStringTypeW ReadFile SetFilePointer CreateFileW

user32

LoadMenuW GetComboBoxInfo DefDlgProcA GetListBoxInfo

gdi32

GetCharWidth32A

advapi32

LookupAccountSidW

shell32

FindExecutableA