848ddbaa7f184e3d3e665bd953af29d841bd2511c6ae24419334dfc4e8635a28

General

Target
848ddbaa7f184e3d3e665bd953af29d841bd2511c6ae24419334dfc4e8635a28
Size 419KB
Sample230416-bw4lpaaa7s
SHA256 848ddbaa7f184e3d3e665bd953af29d841bd2511c6ae24419334dfc4e8635a28
MD5 a66a668ee5af15758e88701059d6a594
SHA1 ecdc72f88534e1826f94f48a2ac1e6092a3764df
SHA512 c9fbbb53df94d4fb417627dc84e235be2254babf2b2126d04f2f15e7c9ca4ec3a483d5df7a717bfc8ce2cf5ba9c382054ff3a64288163e1785820cc644e793c8
SSDEEP 12288:9oHlt9APKDEy9mqVBs1ZFMLQ1RyxK9pvQsq4:9aljAiD1mOu1DsEeWpvQx4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

848ddbaa7f184e3d3e665bd953af29d841bd2511c6ae24419334dfc4e8635a28

.exe 419KB

848ddbaa7f184e3d3e665bd953af29d841bd2511c6ae24419334dfc4e8635a28

IMPHASH 3b66c21f6efd18c330b0dafb9b5476c4
SHA256 848ddbaa7f184e3d3e665bd953af29d841bd2511c6ae24419334dfc4e8635a28
MD5 a66a668ee5af15758e88701059d6a594
SHA1 ecdc72f88534e1826f94f48a2ac1e6092a3764df
SHA512 c9fbbb53df94d4fb417627dc84e235be2254babf2b2126d04f2f15e7c9ca4ec3a483d5df7a717bfc8ce2cf5ba9c382054ff3a64288163e1785820cc644e793c8
SSDEEP 12288:9oHlt9APKDEy9mqVBs1ZFMLQ1RyxK9pvQsq4:9aljAiD1mOu1DsEeWpvQx4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41736

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode GetStringTypeA SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW GetEnvironmentStringsW SetComputerNameW FreeEnvironmentStringsA GetModuleHandleW GetTickCount EnumResourceTypesA GetDriveTypeA SetHandleCount WideCharToMultiByte GetConsoleAliasExesLengthW SetConsoleCP GetComputerNameExA SetConsoleMode GetConsoleAliasW GetFileAttributesW HeapQueryInformation lstrcmpW GetVolumePathNameA FindNextVolumeMountPointW GetStringTypeExA GetNamedPipeHandleStateW EnumSystemLocalesA CreateMutexW InterlockedFlushSList SetLastError GetProcAddress RemoveDirectoryA PrepareTape GetPrivateProfileStringA LoadLibraryA OpenMutexA LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler GetCommMask GetModuleFileNameA Process32NextW FindNextFileA GetModuleHandleA CreateMutexA RequestWakeupLatency GetVersionExA FindAtomW GetCurrentProcessId GetFileInformationByHandle GetConsoleProcessList DeleteFileA CloseHandle WriteConsoleW OpenMutexW DebugActiveProcess InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy SetFilePointer GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers FreeLibrary LoadLibraryW CreateFileW

user32

GetMenu

advapi32

ReportEventA

Sharing

General

Malware Config

Signatures

File Explorer

848ddbaa7f184e3d3e665bd953af29d841bd2511c6ae24419334dfc4e8635a28

kernel32

user32

advapi32