37770c733cc39ddbc94447b60248af748774df40a891fb55f214357fee4e555e

General

Target
37770c733cc39ddbc94447b60248af748774df40a891fb55f214357fee4e555e
Size 425KB
Sample230414-j8mspsae8v
SHA256 37770c733cc39ddbc94447b60248af748774df40a891fb55f214357fee4e555e
MD5 5ddecd909e9f9e0150181eb474f50e92
SHA1 6e65125d0a90a99fbd6b4bd7dc12c7f17916dc39
SHA512 671c52cbd6592a18a374dedb0b7c19bc716edc96504b042abc1bce7ea2a1f481a513222e1a320243d5bc0c46f9372ff68db38698d40d908b653a786c6a566250
SSDEEP 6144:LVTOXFcWOacP+nHNP17oujS2djYb8C0EuQcdadTHOV1gUBCbbFt:xTunuPiHNPBou6mGRdD04b
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

37770c733cc39ddbc94447b60248af748774df40a891fb55f214357fee4e555e

.exe 425KB

37770c733cc39ddbc94447b60248af748774df40a891fb55f214357fee4e555e

IMPHASH 5f311914318e11b06d2b3cf6945fe4fa
SHA256 37770c733cc39ddbc94447b60248af748774df40a891fb55f214357fee4e555e
MD5 5ddecd909e9f9e0150181eb474f50e92
SHA1 6e65125d0a90a99fbd6b4bd7dc12c7f17916dc39
SHA512 671c52cbd6592a18a374dedb0b7c19bc716edc96504b042abc1bce7ea2a1f481a513222e1a320243d5bc0c46f9372ff68db38698d40d908b653a786c6a566250
SSDEEP 6144:LVTOXFcWOacP+nHNP17oujS2djYb8C0EuQcdadTHOV1gUBCbbFt:xTunuPiHNPBou6mGRdD04b
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44032

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode GetStringTypeA SetUnhandledExceptionFilter EnumCalendarInfoW GetCurrentProcess GetEnvironmentStringsW WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA CreateRemoteThread WaitNamedPipeW EnumResourceTypesA GetDriveTypeA SetHandleCount GlobalAlloc WideCharToMultiByte LoadLibraryW GetPrivateProfileStructW GetSystemPowerStatus GetConsoleAliasExesLengthW SetConsoleCP GetFileAttributesA GetComputerNameExA SetConsoleMode GetConsoleAliasW SetConsoleCursorPosition GetModuleFileNameW GetVolumePathNameA FindNextVolumeMountPointW lstrcmpA GetNamedPipeHandleStateW EnumSystemLocalesA OpenMutexW GetLastError InterlockedFlushSList GetProcAddress BackupWrite RemoveDirectoryA GlobalGetAtomNameA PrepareTape ResetEvent LoadLibraryA OpenMutexA InterlockedExchangeAdd SetCalendarInfoW BuildCommDCBAndTimeoutsW SetCommMask GlobalFindAtomW FindNextFileA GetModuleHandleA CreateMutexA RequestWakeupLatency GetVersionExA GetDiskFreeSpaceExW GetFileInformationByHandle DeleteFileA CreateFileW WriteConsoleW CreateMailslotW CreateMutexW FlushFileBuffers SetStdHandle InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind LCMapStringW MultiByteToWideChar GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent HeapCreate HeapDestroy WriteFile GetStdHandle SetFilePointer InitializeCriticalSectionAndSpinCount GetFileType FatalAppExitA SetConsoleCtrlHandler FreeLibrary GetLocaleInfoW GetModuleFileNameA FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW GetConsoleCP GetConsoleMode CloseHandle

user32

GetMenu

advapi32

ReportEventW

winhttp

WinHttpGetIEProxyConfigForCurrentUser

Sharing

General

Malware Config

Signatures

File Explorer

37770c733cc39ddbc94447b60248af748774df40a891fb55f214357fee4e555e

kernel32

user32

advapi32

winhttp