ef819af11911310b0e5f5022d9caf3cbb7086b94f684a12564e882b442ea6787

General

Target
ef819af11911310b0e5f5022d9caf3cbb7086b94f684a12564e882b442ea6787
Size 733KB
Sample230330-yhhtdsfe2v
SHA256 ef819af11911310b0e5f5022d9caf3cbb7086b94f684a12564e882b442ea6787
MD5 4e2925dde500bc2adc9851b173834aca
SHA1 7e7fe2360159f99e0d21e41b45a6c9d902c7aff5
SHA512 9b386e90bd539182b300983ead731a1fd0c4bb63a19ab1fb231a91e61090e74e84284df018b279a6d108e06700e58a9f3f40fc3ffca4cdf095cdbba5f7c9c843
SSDEEP 12288:ZcJpbvSzbCRUyX8RdhL7lpnxf558S/yxriZmIWKwVKhH7wSO8pcYO/:Q4iEh1/8EykZNeGH7bxpcYO/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ef819af11911310b0e5f5022d9caf3cbb7086b94f684a12564e882b442ea6787

.exe 733KB

ef819af11911310b0e5f5022d9caf3cbb7086b94f684a12564e882b442ea6787

IMPHASH 95bc20777b27de7eca3c1140e79c380b
SHA256 ef819af11911310b0e5f5022d9caf3cbb7086b94f684a12564e882b442ea6787
MD5 4e2925dde500bc2adc9851b173834aca
SHA1 7e7fe2360159f99e0d21e41b45a6c9d902c7aff5
SHA512 9b386e90bd539182b300983ead731a1fd0c4bb63a19ab1fb231a91e61090e74e84284df018b279a6d108e06700e58a9f3f40fc3ffca4cdf095cdbba5f7c9c843
SSDEEP 12288:ZcJpbvSzbCRUyX8RdhL7lpnxf558S/yxriZmIWKwVKhH7wSO8pcYO/:Q4iEh1/8EykZNeGH7bxpcYO/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16165

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpA SetLocaleInfoA EnumCalendarInfoA BuildCommDCBAndTimeoutsA CallNamedPipeA LocalCompact EnumCalendarInfoW GetConsoleAliasA SetDefaultCommConfigW GetModuleHandleExW WaitForSingleObject InterlockedCompareExchange WriteConsoleInputA BackupSeek _lclose GetCurrentThread GetWindowsDirectoryA FindActCtxSectionStringA SetProcessPriorityBoost GetDriveTypeA GetEnvironmentStrings GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA TransactNamedPipe CreateTimerQueue CompareStringW GetDevicePowerState DeactivateActCtx GetConsoleOutputCP GetStdHandle SetLastError GetProcAddress ResetEvent OpenWaitableTimerA OpenMutexA CreateFileMappingA LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW WriteProfileSectionW AddAtomA EnumResourceTypesW FindNextFileA GetModuleHandleA CreateMutexA GetStringTypeW WaitForDebugEvent FatalAppExitA DeleteFileW CopyFileExA IsValidLocale EnumSystemLocalesA IsDBCSLeadByte GetPrivateProfileSectionNamesW GetCommandLineA HeapSetInformation GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

advapi32

GetKernelObjectSecurity

Sharing

General

Malware Config

Signatures

File Explorer

ef819af11911310b0e5f5022d9caf3cbb7086b94f684a12564e882b442ea6787

kernel32

user32

advapi32