9fc729235a7c40b5e98e095e3426fcf4406d39a88f2786705936193fbe4c37a2

General

Target
9fc729235a7c40b5e98e095e3426fcf4406d39a88f2786705936193fbe4c37a2
Size 717KB
Sample230331-wjdjyscc33
SHA256 9fc729235a7c40b5e98e095e3426fcf4406d39a88f2786705936193fbe4c37a2
MD5 e54cb05d9e76d29e95df32a781ece1ed
SHA1 f4aa76d3838f27a25fafeb8dc02a30db48574afb
SHA512 bd194cc3e6791eea916b309a951960a2289054b30f7daabfca854361ceecc00e49691479b0153e380698893e3ab0916489832b3283ade99abbc8f1b27a4160c5
SSDEEP 12288:oI80IJzpAt6ZrMFysxHsYjIV57cBirbXyTMwsFgeR9fFPr5CPGuiYUuU:x8x9pAUrMFwdcB9eXpqUYUu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9fc729235a7c40b5e98e095e3426fcf4406d39a88f2786705936193fbe4c37a2

.exe 717KB

9fc729235a7c40b5e98e095e3426fcf4406d39a88f2786705936193fbe4c37a2

IMPHASH 1de37b80b44b4ba8316caf174d735200
SHA256 9fc729235a7c40b5e98e095e3426fcf4406d39a88f2786705936193fbe4c37a2
MD5 e54cb05d9e76d29e95df32a781ece1ed
SHA1 f4aa76d3838f27a25fafeb8dc02a30db48574afb
SHA512 bd194cc3e6791eea916b309a951960a2289054b30f7daabfca854361ceecc00e49691479b0153e380698893e3ab0916489832b3283ade99abbc8f1b27a4160c5
SSDEEP 12288:oI80IJzpAt6ZrMFysxHsYjIV57cBirbXyTMwsFgeR9fFPr5CPGuiYUuU:x8x9pAUrMFwdcB9eXpqUYUu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24784

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA InterlockedIncrement VerSetConditionMask MoveFileExW GetCommState WaitNamedPipeA SetDefaultCommConfigW CreateJobObjectW EnumCalendarInfoExW ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW GetVersionExW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetMailslotInfo GetStringTypeExA GetCPInfoExW SetLastError BackupRead GetProcAddress VirtualAlloc SetStdHandle GetConsoleAliasExesLengthA LoadLibraryA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList DeleteFileA FindResourceExW SearchPathA GetSystemDefaultLangID InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA GetLastError HeapFree RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetCaretBlinkTime

gdi32

SelectPalette

advapi32

MapGenericMask

Sharing

General

Malware Config

Signatures

File Explorer

9fc729235a7c40b5e98e095e3426fcf4406d39a88f2786705936193fbe4c37a2

kernel32

user32

gdi32

advapi32