b4f3b0bbdecc0a07cf5cd53bea1289d7655a331e99b7b2a11f93fa651ad4793c

General

Target
b4f3b0bbdecc0a07cf5cd53bea1289d7655a331e99b7b2a11f93fa651ad4793c
Size 694KB
Sample230403-prennaef63
SHA256 b4f3b0bbdecc0a07cf5cd53bea1289d7655a331e99b7b2a11f93fa651ad4793c
MD5 258a8d8f4e8810d4eb840b836d9c26d0
SHA1 d22540ae61a84ddb8a9be04ac678036c61c4e941
SHA512 bff35de3e86edc6a86b7264b92a4e23dc03f8fbfd045fc837fee6eb53c25fb4bb706c5731106ce3648d48a9a8a042e9eff3cbff57fc9a383bad3da33fb36fe7a
SSDEEP 12288:pGnWgHtWVFRcT3/YoBzOos9OSbfQOdKc6FqFfAMdsvFCcBm:pGnW6QVFJa5XEKcwoIMdgFCcB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b4f3b0bbdecc0a07cf5cd53bea1289d7655a331e99b7b2a11f93fa651ad4793c

.exe 694KB

b4f3b0bbdecc0a07cf5cd53bea1289d7655a331e99b7b2a11f93fa651ad4793c

IMPHASH bb60398211b18fadc0393d4c1e0d3fbd
SHA256 b4f3b0bbdecc0a07cf5cd53bea1289d7655a331e99b7b2a11f93fa651ad4793c
MD5 258a8d8f4e8810d4eb840b836d9c26d0
SHA1 d22540ae61a84ddb8a9be04ac678036c61c4e941
SHA512 bff35de3e86edc6a86b7264b92a4e23dc03f8fbfd045fc837fee6eb53c25fb4bb706c5731106ce3648d48a9a8a042e9eff3cbff57fc9a383bad3da33fb36fe7a
SSDEEP 12288:pGnWgHtWVFRcT3/YoBzOos9OSbfQOdKc6FqFfAMdsvFCcBm:pGnW6QVFJa5XEKcwoIMdgFCcB
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24631

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW InterlockedCompareExchange FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA ReadConsoleW WaitNamedPipeW SetHandleCount TlsSetValue FindResourceExA WideCharToMultiByte LoadLibraryW GetVersionExW DeleteVolumeMountPointW GetStringTypeExW SetConsoleMode HeapValidate SetConsoleCursorPosition GetMailslotInfo GetModuleFileNameW SetLastError BackupRead GetNumberOfConsoleMouseButtons VirtualAlloc SetStdHandle LoadLibraryA LocalAlloc WritePrivateProfileStringA AddAtomW OpenEventA BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleHandleA QueryPerformanceFrequency GetCPInfoExA GetVersionExA GetWindowsDirectoryW AddConsoleAliasA DebugBreak EnumCalendarInfoExA InterlockedPushEntrySList DeleteFileA GetCommState MoveFileExW VerSetConditionMask CommConfigDialogA InterlockedIncrement GetProcAddress GetSystemDefaultLangID InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA RtlUnwind RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId GetFileType SetFilePointer GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharacterPlacementA SelectPalette GetTextExtentExPointW GetCharWidthI

advapi32

MapGenericMask GetEventLogInformation

Sharing

General

Malware Config

Signatures

File Explorer

b4f3b0bbdecc0a07cf5cd53bea1289d7655a331e99b7b2a11f93fa651ad4793c

kernel32

gdi32

advapi32