306839eeb37080b5d6e7d32ab0b261995877e9d143e91d1d1e06cdf636bcea28

General

Target
306839eeb37080b5d6e7d32ab0b261995877e9d143e91d1d1e06cdf636bcea28
Size 350KB
Sample230414-z3115sca42
SHA256 306839eeb37080b5d6e7d32ab0b261995877e9d143e91d1d1e06cdf636bcea28
MD5 448f489ab8ce71cb24c4ed44e2a151cf
SHA1 44ce7712652ddc9e21d2c9965ee4e6a53a05b1ce
SHA512 f93f88bcb35cb729224f810a1443415336971a9fa0f705500d44301ff4cdbba03bfdfc10732f5caf09fb97eb82ba6717c975ab7b4b28a125f0b5a0e40739f524
SSDEEP 6144:hL8RcVR3Bk+HT7H8wOcZHnoUvQGU9Dxi:hLzVFu+z7H3OcxnTU9Y
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

306839eeb37080b5d6e7d32ab0b261995877e9d143e91d1d1e06cdf636bcea28

.exe 350KB

306839eeb37080b5d6e7d32ab0b261995877e9d143e91d1d1e06cdf636bcea28

IMPHASH 0b2050d2d678a2f5ddd557b18dfb3c24
SHA256 306839eeb37080b5d6e7d32ab0b261995877e9d143e91d1d1e06cdf636bcea28
MD5 448f489ab8ce71cb24c4ed44e2a151cf
SHA1 44ce7712652ddc9e21d2c9965ee4e6a53a05b1ce
SHA512 f93f88bcb35cb729224f810a1443415336971a9fa0f705500d44301ff4cdbba03bfdfc10732f5caf09fb97eb82ba6717c975ab7b4b28a125f0b5a0e40739f524
SSDEEP 6144:hL8RcVR3Bk+HT7H8wOcZHnoUvQGU9Dxi:hLzVFu+z7H3OcxnTU9Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpA EnumCalendarInfoA GetNumaProcessorNode GetStringTypeA GetDriveTypeW SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW WaitNamedPipeA WriteConsoleInputA SetComputerNameW GetModuleHandleW CreateRemoteThread EnumResourceTypesA GetDriveTypeA SetHandleCount GetEnvironmentStrings WideCharToMultiByte GetPrivateProfileStructW GetSystemPowerStatus GetConsoleAliasExesLengthW SetConsoleCP GetFileAttributesA GetComputerNameExA SetConsoleMode GetConsoleAliasW SetConsoleCursorPosition GetVolumePathNameA FindNextVolumeMountPointW CreateMutexW GetNamedPipeHandleStateW OpenMutexW InterlockedFlushSList SetLastError GetProcAddress BackupWrite RemoveDirectoryA PrepareTape LoadLibraryA OpenMutexA LocalAlloc SetCalendarInfoW GlobalGetAtomNameW GetCommMask FindAtomA GetModuleFileNameA FindNextFileA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW RequestWakeupLatency GetDiskFreeSpaceExA GetVersionExA GetCurrentProcessId GetFileInformationByHandle EnumSystemLocalesW DeleteFileA CreateFileW WriteConsoleW CreateMailslotW PulseEvent InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc HeapReAlloc ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind LCMapStringW MultiByteToWideChar GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameW SetFilePointer InitializeCriticalSectionAndSpinCount GetFileType FatalAppExitA SetConsoleCtrlHandler FreeLibrary LoadLibraryW GetLocaleInfoW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers CloseHandle

user32

GetMenu

advapi32

ReportEventA

Sharing

General

Malware Config

Signatures

File Explorer

306839eeb37080b5d6e7d32ab0b261995877e9d143e91d1d1e06cdf636bcea28

kernel32

user32

advapi32