00dd5c97e86646df73973ba24085ebb32db19de258f37ed50b5c333087bb6b5c

General

Target
00dd5c97e86646df73973ba24085ebb32db19de258f37ed50b5c333087bb6b5c
Size 424KB
Sample230418-nax81aba48
SHA256 00dd5c97e86646df73973ba24085ebb32db19de258f37ed50b5c333087bb6b5c
MD5 3ec8418fcb455d4105874bdb1f0e4f72
SHA1 8e79b4b1ff569c6678e9ea767d37c1644c77a44f
SHA512 64da576e6714eb322e0c272d58c7c89d4633d3de72a06681454ae145398fc21f621d3bf3c6344ee9fb80d58dacf46132152e702f57e948e3a7389dc09bb089fb
SSDEEP 6144:v395hZPtzHJ58PcJRMPqUBSf4/t8eyWDBbRj+n2v:v3vXBHJ58PcfMSCSfKt8eBdjco
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

00dd5c97e86646df73973ba24085ebb32db19de258f37ed50b5c333087bb6b5c

.exe 424KB

00dd5c97e86646df73973ba24085ebb32db19de258f37ed50b5c333087bb6b5c

IMPHASH f4388ef4d1c512eb2cf856bee52bb494
SHA256 00dd5c97e86646df73973ba24085ebb32db19de258f37ed50b5c333087bb6b5c
MD5 3ec8418fcb455d4105874bdb1f0e4f72
SHA1 8e79b4b1ff569c6678e9ea767d37c1644c77a44f
SHA512 64da576e6714eb322e0c272d58c7c89d4633d3de72a06681454ae145398fc21f621d3bf3c6344ee9fb80d58dacf46132152e702f57e948e3a7389dc09bb089fb
SSDEEP 6144:v395hZPtzHJ58PcJRMPqUBSf4/t8eyWDBbRj+n2v:v3vXBHJ58PcfMSCSfKt8eBdjco
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42802

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter EnumCalendarInfoW InterlockedDecrement GetNamedPipeHandleStateA GetEnvironmentStringsW SetComputerNameW GetComputerNameW FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetPrivateProfileStringW EnumResourceTypesA GetDriveTypeA LoadLibraryW SetConsoleCP GetFileAttributesA SetConsoleMode GetConsoleAliasW GetFileAttributesW GetModuleFileNameW GetVolumePathNameA FindNextVolumeMountPointW GetStringTypeExA DebugActiveProcessStop OpenMutexW InterlockedFlushSList GetProcAddress GetComputerNameExW BeginUpdateResourceW RemoveDirectoryA PrepareTape LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler FindFirstVolumeMountPointW PostQueuedCompletionStatus Process32NextW FindNextFileA CreateMutexA RequestWakeupLatency WaitForDebugEvent GetVersionExA FindAtomW GetFileInformationByHandle GetConsoleProcessList DeleteFileA CloseHandle WriteConsoleW EnumSystemLocalesA DebugActiveProcess InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize ExitProcess TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread WriteFile GetModuleFileNameA FreeEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW SetConsoleCtrlHandler SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers FreeLibrary CreateFileW

user32

GetMenu

advapi32

ReportEventW

Sharing

General

Malware Config

Signatures

File Explorer

00dd5c97e86646df73973ba24085ebb32db19de258f37ed50b5c333087bb6b5c

kernel32

user32

advapi32