b2628cc806a1db0d4350be4a0b8f00ba26c4472ba495b42144d8ee17d8f30876

General

Target
b2628cc806a1db0d4350be4a0b8f00ba26c4472ba495b42144d8ee17d8f30876
Size 779KB
Sample230327-cy85mabc86
SHA256 b2628cc806a1db0d4350be4a0b8f00ba26c4472ba495b42144d8ee17d8f30876
MD5 fb647ee6f4a3bcbd2f1e26ea53d99268
SHA1 9bd5cfaad471637e38cb82a12dd752766184d37a
SHA512 0943fbd27fa685094736f484ee7dc6e798ae743751f4013d23a21c5408be6aa9e6149dfa451e27abe8072a61fedcb46cec4583e5764cde4c5dd3f464c282ad55
SSDEEP 12288:mT6j0XATxBaRo0qj+6Vod/twCaMEX4NaS8hnWrVfR0nps/9PNNyAN2SdIdvqTJUF:7mATRj+u4hRAZWJOne1Ny1dAJUF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b2628cc806a1db0d4350be4a0b8f00ba26c4472ba495b42144d8ee17d8f30876

.exe 779KB

b2628cc806a1db0d4350be4a0b8f00ba26c4472ba495b42144d8ee17d8f30876

IMPHASH e995a4cf6af4dc2215ec1060df8374d2
SHA256 b2628cc806a1db0d4350be4a0b8f00ba26c4472ba495b42144d8ee17d8f30876
MD5 fb647ee6f4a3bcbd2f1e26ea53d99268
SHA1 9bd5cfaad471637e38cb82a12dd752766184d37a
SHA512 0943fbd27fa685094736f484ee7dc6e798ae743751f4013d23a21c5408be6aa9e6149dfa451e27abe8072a61fedcb46cec4583e5764cde4c5dd3f464c282ad55
SSDEEP 12288:mT6j0XATxBaRo0qj+6Vod/twCaMEX4NaS8hnWrVfR0nps/9PNNyAN2SdIdvqTJUF:7mATRj+u4hRAZWJOne1Ny1dAJUF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

17209

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA CreateMutexW lstrcmpA EnumCalendarInfoA WriteConsoleInputW EnumDateFormatsExW CopyFileExW BuildCommDCBAndTimeoutsA VerSetConditionMask GetConsoleAliasA GetModuleHandleExW WaitForSingleObject SetEvent _lclose GetProcessPriorityBoost GetModuleHandleW EnumTimeFormatsW EnumResourceTypesA GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA TerminateProcess GlobalUnlock SetCurrentDirectoryA IsDBCSLeadByteEx SetLastError GetProcAddress GetComputerNameExW SearchPathA OpenMutexA OpenWaitableTimerW LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW WriteProfileSectionW AddAtomA GetPrivateProfileSectionNamesA FreeEnvironmentStringsW FindNextFileW GetStringTypeW PeekConsoleInputA GetCurrentThreadId GetWindowsDirectoryW DeleteFileW EnumCalendarInfoExA EnumSystemLocalesA GetLocaleInfoA GetLastError MoveFileA DeleteFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection HeapCreate HeapDestroy HeapFree HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

LoadMenuA

Sharing

General

Malware Config

Signatures

File Explorer

b2628cc806a1db0d4350be4a0b8f00ba26c4472ba495b42144d8ee17d8f30876

kernel32

user32