be5964b1f52b9673381a9215404bbbfeeb4191dee535829e8df6fb019caa378f

General

Target
be5964b1f52b9673381a9215404bbbfeeb4191dee535829e8df6fb019caa378f
Size 745KB
Sample230329-jptf5sha3v
SHA256 be5964b1f52b9673381a9215404bbbfeeb4191dee535829e8df6fb019caa378f
MD5 c780f071c260f8800794783095604b3c
SHA1 96be23c145896416fc0c5e55f23dd6c6f04cd412
SHA512 47798f41157d409e3aef8905ff9e958d5bd3a27b926944e7b50e60d6f7336ea506dc45ab65d78bec676ebc02305d9d2f6918979b14ef557ecad0ac4fd51be750
SSDEEP 12288:SNvLwTob3iUwF8CUxjZYvCmsUbEng13ZltSxMqwP61UhffkXaA6gskbjbtKaW:SQob3ioCtvmqZltSHCa2ffkXaUskPbt/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

be5964b1f52b9673381a9215404bbbfeeb4191dee535829e8df6fb019caa378f

.exe 745KB

be5964b1f52b9673381a9215404bbbfeeb4191dee535829e8df6fb019caa378f

IMPHASH 131680c2cabbac9aaecb70167d143fcd
SHA256 be5964b1f52b9673381a9215404bbbfeeb4191dee535829e8df6fb019caa378f
MD5 c780f071c260f8800794783095604b3c
SHA1 96be23c145896416fc0c5e55f23dd6c6f04cd412
SHA512 47798f41157d409e3aef8905ff9e958d5bd3a27b926944e7b50e60d6f7336ea506dc45ab65d78bec676ebc02305d9d2f6918979b14ef557ecad0ac4fd51be750
SSDEEP 12288:SNvLwTob3iUwF8CUxjZYvCmsUbEng13ZltSxMqwP61UhffkXaA6gskbjbtKaW:SQob3ioCtvmqZltSHCa2ffkXaUskPbt/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

34799

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery DeleteVolumeMountPointA InterlockedIncrement GetCommState SetDefaultCommConfigW GetProfileStringW SetComputerNameW AddConsoleAliasW GetSystemDefaultLCID GetConsoleTitleA GetCompressedFileSizeW WaitNamedPipeW CreateActCtxW EnumResourceTypesA SetHandleCount TlsSetValue FindResourceExA LoadLibraryW InterlockedPopEntrySList GetStringTypeExW SetConsoleMode GetModuleFileNameW GetConsoleAliasesW GetLongPathNameW SetLastError MoveFileExA GetProcAddress VirtualAlloc SetStdHandle SearchPathA SetThreadPriorityBoost LoadLibraryA LocalAlloc SetCalendarInfoW WritePrivateProfileStringA CreateHardLinkW OpenEventA BeginUpdateResourceA WriteProfileSectionW AddAtomA FoldStringA GetModuleHandleA FreeEnvironmentStringsW WaitForDebugEvent QueryPerformanceFrequency DeleteFileW GetConsoleProcessList EnumCalendarInfoExA ReadConsoleOutputCharacterA CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType GetStartupInfoA SetFilePointer GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CloseHandle

user32

GetCaretBlinkTime

gdi32

CreateCompatibleBitmap SelectPalette GetBoundsRect

Sharing

General

Malware Config

Signatures

File Explorer

be5964b1f52b9673381a9215404bbbfeeb4191dee535829e8df6fb019caa378f

kernel32

user32

gdi32