246e2009a4a4007f721d844b00c41accbd6c40a67dd4765ef81e476ce0ff1c8f

General

Target
246e2009a4a4007f721d844b00c41accbd6c40a67dd4765ef81e476ce0ff1c8f
Size 701KB
Sample230409-hs86bsbe5x
SHA256 246e2009a4a4007f721d844b00c41accbd6c40a67dd4765ef81e476ce0ff1c8f
MD5 6c5994385db9dc4522b925a436058e9b
SHA1 bc16e68c44a101091ee9103d4dcb941def3ed298
SHA512 e89af67aaf66c2f4f9078870d702df2c39b761d914e283becb624bee32ba54f634c708ac0c7b18c0cf1a33bf3d17cfc67737e7290e10a67d05cfa3ec838bc5b0
SSDEEP 12288:7qGJP/sMI701XwDYxWukkc4leoMQZmipMXZobyVuh9liI:VJPrIQ1XFWulc8q0cuhni
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

246e2009a4a4007f721d844b00c41accbd6c40a67dd4765ef81e476ce0ff1c8f

.exe 701KB

246e2009a4a4007f721d844b00c41accbd6c40a67dd4765ef81e476ce0ff1c8f

IMPHASH 8effd33c0c7d3209e4d0dde05803b13b
SHA256 246e2009a4a4007f721d844b00c41accbd6c40a67dd4765ef81e476ce0ff1c8f
MD5 6c5994385db9dc4522b925a436058e9b
SHA1 bc16e68c44a101091ee9103d4dcb941def3ed298
SHA512 e89af67aaf66c2f4f9078870d702df2c39b761d914e283becb624bee32ba54f634c708ac0c7b18c0cf1a33bf3d17cfc67737e7290e10a67d05cfa3ec838bc5b0
SSDEEP 12288:7qGJP/sMI701XwDYxWukkc4leoMQZmipMXZobyVuh9liI:VJPrIQ1XFWulc8q0cuhni
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20791

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ScrollConsoleScreenBufferW QueryPerformanceCounter GetUserDefaultLCID SetConsoleScreenBufferSize InterlockedCompareExchange AddConsoleAliasW GetModuleHandleW EnumCalendarInfoExW ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GlobalAlloc LoadLibraryW GetVersionExW GetFileAttributesA HeapQueryInformation GetMailslotInfo GetStringTypeExA CreateJobObjectA EnumSystemLocalesA GetProfileIntA GetLastError InterlockedFlushSList GetProcAddress VirtualAlloc WaitNamedPipeA BackupWrite SetFirmwareEnvironmentVariableW RemoveDirectoryA CopyFileA CreateSemaphoreW WritePrivateProfileStringA MoveFileA AddAtomW BeginUpdateResourceA PostQueuedCompletionStatus WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleHandleA FreeEnvironmentStringsW VirtualProtect OpenEventW GetShortPathNameW GetCPInfoExA GetVersionExA GetConsoleProcessList DebugBreak HeapSize InterlockedIncrement MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree RaiseException WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc

user32

CharLowerBuffW

gdi32

GetBrushOrgEx GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

246e2009a4a4007f721d844b00c41accbd6c40a67dd4765ef81e476ce0ff1c8f

kernel32

user32

gdi32