cbafc3d2008ed6dae456b874591d1c6092a786f607de90f85704c346998df452

General

Target
cbafc3d2008ed6dae456b874591d1c6092a786f607de90f85704c346998df452
Size 424KB
Sample230414-mk4cbshe48
SHA256 cbafc3d2008ed6dae456b874591d1c6092a786f607de90f85704c346998df452
MD5 519207b926463df44972e5245dff1689
SHA1 463c890598012ac22da803d68cec0745a7731e9f
SHA512 317dbaf70f28561e443a81db022cad15db4027455ac31befb80b289426ac91dd824620724d8fd495f1ff81164792f8b12ff7db23be20e924f4758e80f5e4d207
SSDEEP 6144:bhTvfhsQt3HGmjSepsuVaCYNDAomklQgQFIXi+0IihRU3i6Cbbjft:bhThjXGmeepRVay8hQeEIihRUN4bj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

cbafc3d2008ed6dae456b874591d1c6092a786f607de90f85704c346998df452

.exe 424KB

cbafc3d2008ed6dae456b874591d1c6092a786f607de90f85704c346998df452

IMPHASH 2cb59bd9251d49d733d8b63af794a12e
SHA256 cbafc3d2008ed6dae456b874591d1c6092a786f607de90f85704c346998df452
MD5 519207b926463df44972e5245dff1689
SHA1 463c890598012ac22da803d68cec0745a7731e9f
SHA512 317dbaf70f28561e443a81db022cad15db4027455ac31befb80b289426ac91dd824620724d8fd495f1ff81164792f8b12ff7db23be20e924f4758e80f5e4d207
SSDEEP 6144:bhTvfhsQt3HGmjSepsuVaCYNDAomklQgQFIXi+0IihRU3i6Cbbjft:bhThjXGmeepRVay8hQeEIihRUN4bj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43989

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GetNumaProcessorNode GetStringTypeA SetUnhandledExceptionFilter EnumCalendarInfoW GetCurrentProcess GetEnvironmentStringsW WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA CreateRemoteThread WaitNamedPipeW EnumResourceTypesA GetDriveTypeA SetHandleCount GlobalAlloc WideCharToMultiByte LoadLibraryW GetPrivateProfileStructW GetSystemPowerStatus GetConsoleAliasExesLengthW SetConsoleCP GetFileAttributesA GetComputerNameExA SetConsoleMode GetConsoleAliasW SetConsoleCursorPosition GetVolumePathNameA FindNextVolumeMountPointW lstrcmpA GetNamedPipeHandleStateW EnumSystemLocalesA OpenMutexW GetLastError InterlockedFlushSList GetProcAddress BackupWrite RemoveDirectoryA GlobalGetAtomNameA PrepareTape ResetEvent LoadLibraryA OpenMutexA InterlockedExchangeAdd SetCalendarInfoW SetCommMask GlobalFindAtomW GetModuleFileNameA FindNextFileA GetModuleHandleA CreateMutexA RequestWakeupLatency GetVersionExA GetDiskFreeSpaceExW GetFileInformationByHandle DeleteFileA CreateFileW WriteConsoleW CreateMailslotW CreateMutexW FlushFileBuffers SetStdHandle InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind LCMapStringW MultiByteToWideChar GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameW SetFilePointer InitializeCriticalSectionAndSpinCount GetFileType FatalAppExitA SetConsoleCtrlHandler FreeLibrary GetLocaleInfoW FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW GetConsoleCP GetConsoleMode CloseHandle

user32

GetMenu

advapi32

ReportEventW

winhttp

WinHttpGetIEProxyConfigForCurrentUser

Sharing

General

Malware Config

Signatures

File Explorer

cbafc3d2008ed6dae456b874591d1c6092a786f607de90f85704c346998df452

kernel32

user32

advapi32

winhttp