66bcf45409819e0225f46a4942eb292fe0eec705fe467863642220744ab00bb6

General

Target
66bcf45409819e0225f46a4942eb292fe0eec705fe467863642220744ab00bb6
Size 425KB
Sample230415-x97fdsfd42
SHA256 66bcf45409819e0225f46a4942eb292fe0eec705fe467863642220744ab00bb6
MD5 256c3daef254f79543df43c8121d9e26
SHA1 4325d201936cc045d8d6ce29a14327fcc54b468f
SHA512 1c4ec92a261b6b7552fc8f49ad78c7be94e7f608ac2022fa477c07177cd972024257a6365740a00a0400170fad942a1dc01cf6e659d1ce2487276f151ed02147
SSDEEP 6144:WdKGhOmzEdCVhSgZjJjSUoPAzK46tDZZXFOh3Vnwe4:WdHhOmzEdCVhSgfmUo4m46vfOZVnt4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

66bcf45409819e0225f46a4942eb292fe0eec705fe467863642220744ab00bb6

.exe 425KB

66bcf45409819e0225f46a4942eb292fe0eec705fe467863642220744ab00bb6

IMPHASH 1227b8a7d56af7228436b4d89f285cf5
SHA256 66bcf45409819e0225f46a4942eb292fe0eec705fe467863642220744ab00bb6
MD5 256c3daef254f79543df43c8121d9e26
SHA1 4325d201936cc045d8d6ce29a14327fcc54b468f
SHA512 1c4ec92a261b6b7552fc8f49ad78c7be94e7f608ac2022fa477c07177cd972024257a6365740a00a0400170fad942a1dc01cf6e659d1ce2487276f151ed02147
SSDEEP 6144:WdKGhOmzEdCVhSgZjJjSUoPAzK46tDZZXFOh3Vnwe4:WdHhOmzEdCVhSgfmUo4m46vfOZVnt4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42476

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode GetStringTypeA SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA GetModuleHandleW CreateRemoteThread EnumResourceTypesA GetDriveTypeA SetHandleCount GetEnvironmentStrings WideCharToMultiByte GetPrivateProfileStructW GetConsoleAliasExesLengthW SetConsoleCP GetComputerNameExA SetConsoleMode GetConsoleAliasW GetFileAttributesW HeapQueryInformation lstrcmpW GetVolumePathNameA FindNextVolumeMountPointW CreateMailslotW lstrcmpA GetNamedPipeHandleStateW OpenMutexW InterlockedFlushSList SetLastError GetProcAddress RemoveDirectoryA PrepareTape LoadLibraryA OpenMutexA LocalAlloc SetCalendarInfoW GetCommMask GetModuleFileNameA FindNextFileA GetModuleHandleA CreateMutexA RequestWakeupLatency GetVersionExA GetDiskFreeSpaceExW FindAtomW GetCurrentProcessId GetFileInformationByHandle GetConsoleProcessList EnumSystemLocalesW DeleteFileA CreateFileW WriteConsoleW GetStringTypeExA CreateMutexW InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc HeapReAlloc ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind LCMapStringW MultiByteToWideChar GetCPInfo UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameW SetFilePointer InitializeCriticalSectionAndSpinCount GetFileType FatalAppExitA SetConsoleCtrlHandler FreeLibrary LoadLibraryW GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers CloseHandle

user32

GetMenu

advapi32

ReportEventA

Sharing

General

Malware Config

Signatures

File Explorer

66bcf45409819e0225f46a4942eb292fe0eec705fe467863642220744ab00bb6

kernel32

user32

advapi32