cf16017d52d732eda618772bd374ecde984322b1b27a86d6b607459ec93f8d8b

General

Target
cf16017d52d732eda618772bd374ecde984322b1b27a86d6b607459ec93f8d8b
Size 782KB
Sample230326-e5jveshd9t
SHA256 cf16017d52d732eda618772bd374ecde984322b1b27a86d6b607459ec93f8d8b
MD5 a3246990eaea2136d4ecaaa6a99bf2e0
SHA1 63e610f0f2c63422ca830422ba24fb1bb66f3ed6
SHA512 c5c82ce5b9757824bf5d24607ad3d170e720b81c930d7e61900aec01e271d31bbe465b28c68f2d906b210db928a3ac44c1ba774ae02fbc5ec97e8c8d76fc58e6
SSDEEP 12288:r2oy1XGyB/bEIPQ5APAwBNmH86iytSCh1qQxhhJNg5xj/Y9pz:WFGypEIPQ5AlN6iyY6bazS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

cf16017d52d732eda618772bd374ecde984322b1b27a86d6b607459ec93f8d8b

.exe 782KB

cf16017d52d732eda618772bd374ecde984322b1b27a86d6b607459ec93f8d8b

IMPHASH 5bf64f0a1a526a4cdb08b53a545d3838
SHA256 cf16017d52d732eda618772bd374ecde984322b1b27a86d6b607459ec93f8d8b
MD5 a3246990eaea2136d4ecaaa6a99bf2e0
SHA1 63e610f0f2c63422ca830422ba24fb1bb66f3ed6
SHA512 c5c82ce5b9757824bf5d24607ad3d170e720b81c930d7e61900aec01e271d31bbe465b28c68f2d906b210db928a3ac44c1ba774ae02fbc5ec97e8c8d76fc58e6
SSDEEP 12288:r2oy1XGyB/bEIPQ5APAwBNmH86iytSCh1qQxhhJNg5xj/Y9pz:WFGypEIPQ5AlN6iyY6bazS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18066

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW CreateMutexW SearchPathW EnumCalendarInfoA CopyFileExW _llseek VerSetConditionMask GetCurrentActCtx SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject WriteConsoleInputA SetEvent GetProcessPriorityBoost GetModuleHandleW EnumTimeFormatsW EnumResourceTypesA GlobalAlloc LoadLibraryW GetFileAttributesA GetConsoleAliasW TerminateProcess lstrcmpW GlobalUnlock OpenMutexW IsDBCSLeadByteEx SetLastError GetProcAddress GetComputerNameExW GetFirmwareEnvironmentVariableW OpenWaitableTimerW LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW AddAtomW SetCurrentDirectoryW AddAtomA FindNextFileA FreeEnvironmentStringsW FindNextFileW GetStringTypeW PeekConsoleInputA GetCurrentThreadId GetCPInfoExA SetCalendarInfoA GetWindowsDirectoryW EnumCalendarInfoExA GetConsoleSelectionInfo DeleteFileA SetStdHandle WriteConsoleW GetLastError WideCharToMultiByte MoveFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar FatalAppExitA Sleep GetLocaleInfoW RaiseException GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing

General

Malware Config

Signatures

File Explorer

cf16017d52d732eda618772bd374ecde984322b1b27a86d6b607459ec93f8d8b

kernel32

user32