a5a474275a80be0d1efabf4534e9bae26c06968ed0fbb163c7dd2eb894c163fc

General

Target
a5a474275a80be0d1efabf4534e9bae26c06968ed0fbb163c7dd2eb894c163fc
Size 809KB
Sample230409-3n584aff7s
SHA256 a5a474275a80be0d1efabf4534e9bae26c06968ed0fbb163c7dd2eb894c163fc
MD5 568cc9feb1cf4b68229a5f62c246bdef
SHA1 a57196d0a68dff46444ee4c3904919d5c4c715f4
SHA512 b0e6387372ddc08a365113fa1b49de5c72ae50df53d89ccf46ad060961f120a6d8f7435fe36cac934ed0cfd600e7a701428a34d92bddb84c425100334168dd6c
SSDEEP 12288:cGuCbvb6iXYXfiqFE4USNdDbixaO3PpzqWbvV3EyW7uAmCMWuiC3+CqsDQGnaI:LXmvTSFSz3idBiyPqCuPsDQOa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a5a474275a80be0d1efabf4534e9bae26c06968ed0fbb163c7dd2eb894c163fc

.exe 809KB

a5a474275a80be0d1efabf4534e9bae26c06968ed0fbb163c7dd2eb894c163fc

IMPHASH 19f87512189bc3d11ceffc7f82e766f2
SHA256 a5a474275a80be0d1efabf4534e9bae26c06968ed0fbb163c7dd2eb894c163fc
MD5 568cc9feb1cf4b68229a5f62c246bdef
SHA1 a57196d0a68dff46444ee4c3904919d5c4c715f4
SHA512 b0e6387372ddc08a365113fa1b49de5c72ae50df53d89ccf46ad060961f120a6d8f7435fe36cac934ed0cfd600e7a701428a34d92bddb84c425100334168dd6c
SSDEEP 12288:cGuCbvb6iXYXfiqFE4USNdDbixaO3PpzqWbvV3EyW7uAmCMWuiC3+CqsDQGnaI:LXmvTSFSz3idBiyPqCuPsDQOa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetDriveTypeW BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter GetConsoleAliasA WaitNamedPipeA GetNamedPipeHandleStateA GetModuleHandleExW GetUserDefaultLCID InterlockedCompareExchange WriteConsoleInputA SetEvent FreeEnvironmentStringsA SetTapeParameters GetModuleHandleW CreateRemoteThread GetDateFormatA AllocateUserPhysicalPages GetEnvironmentStrings GlobalAlloc GetConsoleMode GetVersionExW GetFileAttributesA FindNextVolumeW GetBinaryTypeA GetModuleFileNameW lstrcmpW MultiByteToWideChar FindNextVolumeMountPointW EnumCalendarInfoA GetLastError BackupRead GetProcAddress GetComputerNameExW RemoveDirectoryA GlobalGetAtomNameA LoadLibraryA OpenMutexA DnsHostnameToComputerNameA GetCommMask RtlCaptureStackBackTrace GetPrivateProfileStructA GlobalFindAtomW EnumResourceTypesW FindNextFileA GetModuleHandleA EraseTape CreateMutexA CreateMailslotA RequestWakeupLatency ScrollConsoleScreenBufferA SetCalendarInfoA GetDiskFreeSpaceExA DeleteFileW GetFileInformationByHandle FindActCtxSectionStringW EnumSystemLocalesW CreateFileW IsProcessorFeaturePresent GetConsoleOutputCP GetVolumeNameForVolumeMountPointA WriteConsoleW HeapSize DeleteFileA HeapReAlloc ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread HeapCreate HeapDestroy HeapFree HeapAlloc FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryW GetLocaleInfoW WriteFile GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP Sleep SetStdHandle FlushFileBuffers RtlUnwind LCMapStringW GetStringTypeW GetLocaleInfoA EnumSystemLocalesA IsValidLocale CloseHandle

user32

GetMenu

advapi32

ReportEventA

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

a5a474275a80be0d1efabf4534e9bae26c06968ed0fbb163c7dd2eb894c163fc

kernel32

user32

advapi32

winhttp