ecef570006b97facff4930711c18b2be2a58fdbd51156ced471d9386b45ade43

General

Target
ecef570006b97facff4930711c18b2be2a58fdbd51156ced471d9386b45ade43
Size 347KB
Sample230416-j8qvcsbb4s
SHA256 ecef570006b97facff4930711c18b2be2a58fdbd51156ced471d9386b45ade43
MD5 d4a285e8a27593aaeac9645b47777407
SHA1 7dca270b40cf80b37e1e7e1545e78fad0ffe9ed1
SHA512 672bf3c2fecd8a4ca01199f85fdd93980a3779073687c1074405f90947cfc499ce29f1154da7fc1be351702754db4e7ec7ed930649bf9717b513d68ddde08088
SSDEEP 6144:IRw+S0i95YDQq5k6zEpZof1KpWJ91a+inRr9bUYyR:IRZSRkDQq5k6ApWN791LK9bA
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ecef570006b97facff4930711c18b2be2a58fdbd51156ced471d9386b45ade43

.exe 347KB

ecef570006b97facff4930711c18b2be2a58fdbd51156ced471d9386b45ade43

IMPHASH 3b66c21f6efd18c330b0dafb9b5476c4
SHA256 ecef570006b97facff4930711c18b2be2a58fdbd51156ced471d9386b45ade43
MD5 d4a285e8a27593aaeac9645b47777407
SHA1 7dca270b40cf80b37e1e7e1545e78fad0ffe9ed1
SHA512 672bf3c2fecd8a4ca01199f85fdd93980a3779073687c1074405f90947cfc499ce29f1154da7fc1be351702754db4e7ec7ed930649bf9717b513d68ddde08088
SSDEEP 6144:IRw+S0i95YDQq5k6zEpZof1KpWJ91a+inRr9bUYyR:IRZSRkDQq5k6ApWN791LK9bA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42168

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode GetStringTypeA SetUnhandledExceptionFilter InterlockedIncrement EnumCalendarInfoW GetEnvironmentStringsW SetComputerNameW FreeEnvironmentStringsA GetModuleHandleW GetTickCount EnumResourceTypesA GetDriveTypeA SetHandleCount WideCharToMultiByte GetConsoleAliasExesLengthW SetConsoleCP GetComputerNameExA SetConsoleMode GetConsoleAliasW GetFileAttributesW HeapQueryInformation lstrcmpW GetVolumePathNameA FindNextVolumeMountPointW GetStringTypeExA GetNamedPipeHandleStateW EnumSystemLocalesA CreateMutexW InterlockedFlushSList SetLastError GetProcAddress RemoveDirectoryA PrepareTape GetPrivateProfileStringA LoadLibraryA OpenMutexA LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler GetCommMask GetModuleFileNameA Process32NextW FindNextFileA GetModuleHandleA CreateMutexA RequestWakeupLatency GetVersionExA FindAtomW GetCurrentProcessId GetFileInformationByHandle GetConsoleProcessList DeleteFileA CloseHandle WriteConsoleW OpenMutexW DebugActiveProcess InterlockedDecrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy SetFilePointer GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers FreeLibrary LoadLibraryW CreateFileW

user32

GetMenu

advapi32

ReportEventA

Sharing

General

Malware Config

Signatures

File Explorer

ecef570006b97facff4930711c18b2be2a58fdbd51156ced471d9386b45ade43

kernel32

user32

advapi32