138b1d4d4e0d854f6ae9fe1103f26158e0df921384a403c812649534158809a9

General

Target
138b1d4d4e0d854f6ae9fe1103f26158e0df921384a403c812649534158809a9
Size 765KB
Sample230327-t773csgd5v
SHA256 138b1d4d4e0d854f6ae9fe1103f26158e0df921384a403c812649534158809a9
MD5 23f7d98ddb2bafaefd121c30aeb2a7b1
SHA1 56e0967ba750cc8b8a7eaaad287210ff494e32a9
SHA512 ac76e9a554ef16752a9b438f23511dbb26a30ef11f68541843a3820761330f9c4649b5d479b0a4ed58699e75a3775ff6e3a568212079248ebb4e6fb082734944
SSDEEP 12288:9jZ58lx9fhvCKqugl21Q3HGOj6zxECE9ACOoA1x5DujXWjmqHLraHT:lv01hKKqBl212HP6zKFYvwWjpH
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

138b1d4d4e0d854f6ae9fe1103f26158e0df921384a403c812649534158809a9

.exe 765KB

138b1d4d4e0d854f6ae9fe1103f26158e0df921384a403c812649534158809a9

IMPHASH 2f460961725ca1bacd7af1f08dcd53a6
SHA256 138b1d4d4e0d854f6ae9fe1103f26158e0df921384a403c812649534158809a9
MD5 23f7d98ddb2bafaefd121c30aeb2a7b1
SHA1 56e0967ba750cc8b8a7eaaad287210ff494e32a9
SHA512 ac76e9a554ef16752a9b438f23511dbb26a30ef11f68541843a3820761330f9c4649b5d479b0a4ed58699e75a3775ff6e3a568212079248ebb4e6fb082734944
SSDEEP 12288:9jZ58lx9fhvCKqugl21Q3HGOj6zxECE9ACOoA1x5DujXWjmqHLraHT:lv01hKKqBl212HP6zKFYvwWjpH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34515

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW GetConsoleAliasExesLengthA DeleteVolumeMountPointA MoveFileExW GetCommState WaitNamedPipeA GlobalSize SetDefaultCommConfigW CreateHardLinkA WaitForSingleObjectEx FreeEnvironmentStringsA EnumCalendarInfoExW GetConsoleTitleA ReadConsoleW GetCompressedFileSizeW CreateActCtxW SetHandleCount TlsSetValue VirtualFreeEx LoadLibraryW InterlockedPopEntrySList SetConsoleMode GetConsoleAliasW GetFileAttributesW IsBadStringPtrA WritePrivateProfileStringW VirtualQuery GetConsoleAliasesW GetStdHandle SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW EnumSystemCodePagesW SetThreadPriorityBoost LoadLibraryA LocalAlloc DnsHostnameToComputerNameA AddAtomW GetProfileStringA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA OpenEventW QueryPerformanceFrequency SetCalendarInfoA DeleteFileW DebugBreak ReadConsoleOutputCharacterW FindNextVolumeA SearchPathW GetStringTypeExA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharABCWidthsW CreateDiscardableBitmap GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

138b1d4d4e0d854f6ae9fe1103f26158e0df921384a403c812649534158809a9

kernel32

gdi32