68f0d79e93858c789b9159e8ef6e6e1041b24dd94101abe175d629b2c0d976dd

Sharing

Copy URL Twitter E-mail

General

Target
68f0d79e93858c789b9159e8ef6e6e1041b24dd94101abe175d629b2c0d976dd
Size 758KB
Sample230401-d5afbaff97
SHA256 68f0d79e93858c789b9159e8ef6e6e1041b24dd94101abe175d629b2c0d976dd
MD5 3b0130051b7383efe32f05123501f54c
SHA1 2939ccfe4e6c93384bd4dd0eb92ed11361913f22
SHA512 3e2dab1dcc198fc9ebb58a1354543fd7c4f67a38eda970b7dfb99af2f7c2d3dc1e4f6a99a770430f419e9627fb25aa6d8b0b05acd34c40df2249dcf4b778ce68
SSDEEP 12288:VE7q/5VLhzpv9dOmus8r3tYoekUmzEwpGgZXXLGy9Y7c3UzZ9kCMs98UN:VsMHzd64o3OoYroGw9YY3UzkCMsq
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

68f0d79e93858c789b9159e8ef6e6e1041b24dd94101abe175d629b2c0d976dd

.exe 758KB

68f0d79e93858c789b9159e8ef6e6e1041b24dd94101abe175d629b2c0d976dd

IMPHASH 724f7af50306908b18449bf42724cf5d
SHA256 68f0d79e93858c789b9159e8ef6e6e1041b24dd94101abe175d629b2c0d976dd
MD5 3b0130051b7383efe32f05123501f54c
SHA1 2939ccfe4e6c93384bd4dd0eb92ed11361913f22
SHA512 3e2dab1dcc198fc9ebb58a1354543fd7c4f67a38eda970b7dfb99af2f7c2d3dc1e4f6a99a770430f419e9627fb25aa6d8b0b05acd34c40df2249dcf4b778ce68
SSDEEP 12288:VE7q/5VLhzpv9dOmus8r3tYoekUmzEwpGgZXXLGy9Y7c3UzZ9kCMs98UN:VsMHzd64o3OoYroGw9YY3UzkCMsq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24928

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState WaitNamedPipeA CreateJobObjectW EnumCalendarInfoExW GetConsoleAliasesLengthA ReadConsoleW SetHandleCount TlsSetValue LoadLibraryW GetVersionExW GetStringTypeExW SetConsoleMode HeapValidate SetConsoleCursorPosition EnumResourceLanguagesA GetMailslotInfo GetCPInfoExW SetLastError BackupRead GetProcAddress VirtualAlloc BeginUpdateResourceW SetStdHandle SearchPathA MoveFileExW InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsW QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak InterlockedPushEntrySList CommConfigDialogW DeleteFileA VerSetConditionMask InterlockedIncrement FindResourceExW DeleteVolumeMountPointA LoadLibraryA GetSystemDefaultLangID CloseHandle CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA GetLastError HeapFree RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

user32

GetCaretBlinkTime

gdi32

SelectPalette GetTextExtentExPointW GetCharacterPlacementA

advapi32

MapGenericMask GetEventLogInformation

ole32

OleQueryLinkFromData