39019575fab01f3526948ba9dfb246558e289a1b7969c2a2ab88a406e97b5a27

General

Target
39019575fab01f3526948ba9dfb246558e289a1b7969c2a2ab88a406e97b5a27
Size 424KB
Sample230414-wsbfysba34
SHA256 39019575fab01f3526948ba9dfb246558e289a1b7969c2a2ab88a406e97b5a27
MD5 be40b18130202a07751c968c2d3d18ed
SHA1 59e92b94138b2ce1915091095c75123ca159a31b
SHA512 727594a2ec1c3f022345597fdbb7c4f78e1ee11b327bb37ec1c9f6610b11473f2678c1325a67cc7478d22fcae57ece47e90504a49231db91f1ebbafd0545e43e
SSDEEP 6144:lV4vkItsLT/5YbHnbuVw53ysEt/PBDfXWPY750mlnM845bT1EbbTt:lV4rtsPRYbH6Vw0LX3NMD1Twb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

39019575fab01f3526948ba9dfb246558e289a1b7969c2a2ab88a406e97b5a27

.exe 424KB

39019575fab01f3526948ba9dfb246558e289a1b7969c2a2ab88a406e97b5a27

IMPHASH 3b10593507b05b3e16c2399b746b5608
SHA256 39019575fab01f3526948ba9dfb246558e289a1b7969c2a2ab88a406e97b5a27
MD5 be40b18130202a07751c968c2d3d18ed
SHA1 59e92b94138b2ce1915091095c75123ca159a31b
SHA512 727594a2ec1c3f022345597fdbb7c4f78e1ee11b327bb37ec1c9f6610b11473f2678c1325a67cc7478d22fcae57ece47e90504a49231db91f1ebbafd0545e43e
SSDEEP 6144:lV4vkItsLT/5YbHnbuVw53ysEt/PBDfXWPY750mlnM845bT1EbbTt:lV4rtsPRYbH6Vw0LX3NMD1Twb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43893

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpA EnumCalendarInfoA GetNumaProcessorNode GetStringTypeA GetDriveTypeW SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW WaitNamedPipeA GetEnvironmentStringsW WriteConsoleInputA SetComputerNameW GetModuleHandleW CreateRemoteThread EnumResourceTypesA GetDriveTypeA SetHandleCount GlobalAlloc WideCharToMultiByte GetPrivateProfileStructW GetSystemPowerStatus GetConsoleAliasExesLengthW SetConsoleCP GetFileAttributesA GetComputerNameExA SetConsoleMode GetConsoleAliasW SetConsoleCursorPosition GetVolumePathNameA FindNextVolumeMountPointW CreateMutexW GetNamedPipeHandleStateW EnumSystemLocalesA OpenMutexW InterlockedFlushSList SetLastError GetProcAddress BackupWrite RemoveDirectoryA PrepareTape LoadLibraryA OpenMutexA LocalAlloc SetCalendarInfoW GlobalGetAtomNameW GetCommMask FindAtomA GetModuleFileNameA FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW RequestWakeupLatency GetDiskFreeSpaceExA GetVersionExA GetCurrentProcessId GetFileInformationByHandle DeleteFileA CreateFileW WriteConsoleW CreateMailslotW PulseEvent CloseHandle FlushFileBuffers InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc HeapReAlloc ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind LCMapStringW MultiByteToWideChar GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameW SetFilePointer InitializeCriticalSectionAndSpinCount GetFileType FatalAppExitA SetConsoleCtrlHandler FreeLibrary LoadLibraryW GetLocaleInfoW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle

user32

GetMenu

advapi32

ReportEventA

winhttp

WinHttpGetProxyForUrl

Sharing

General

Malware Config

Signatures

File Explorer

39019575fab01f3526948ba9dfb246558e289a1b7969c2a2ab88a406e97b5a27

kernel32

user32

advapi32

winhttp