dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af

General

Target
dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af
Size 298KB
Sample230419-v9956scd44
SHA256 dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af
MD5 9e6329c1ceaae892b709f20abcbefb96
SHA1 ec8470ed41b0be82945b5182b186166e4eb95791
SHA512 2dabc7eabfba82f8fc807d0bf17035821b9ac28191aaedf27dc1aee27cd397dec5a75fc893ed4ea2e250e8619dbb58e34193a0d08db41a6ce073f0cd61ec2f12
SSDEEP 6144:zholEa1TA7CFlBwVedSoxJfEbie4kLJF7s5YPDWJb:zoXUsB8edSoxibi27
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af

.exe 298KB

dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af

IMPHASH 34129420b83fde039f20354acaa91d3f
SHA256 dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af
MD5 9e6329c1ceaae892b709f20abcbefb96
SHA1 ec8470ed41b0be82945b5182b186166e4eb95791
SHA512 2dabc7eabfba82f8fc807d0bf17035821b9ac28191aaedf27dc1aee27cd397dec5a75fc893ed4ea2e250e8619dbb58e34193a0d08db41a6ce073f0cd61ec2f12
SSDEEP 6144:zholEa1TA7CFlBwVedSoxJfEbie4kLJF7s5YPDWJb:zoXUsB8edSoxibi27
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18083

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW EnumTimeFormatsA EnumTimeFormatsW EnumResourceTypesA GlobalAlloc GetStringTypeExW GetFileAttributesA FindNextVolumeW EnumSystemLocalesA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA CreateMemoryResourceNotification _hwrite LoadLibraryA GetLogicalDrives InterlockedExchangeAdd OpenEventA BeginUpdateResourceA WriteProfileSectionW FindFirstChangeNotificationA CreateMailslotA VirtualProtect OpenEventW GetCPInfoExA GetWindowsDirectoryW AddConsoleAliasA EnumCalendarInfoExA TlsFree RaiseException UnlockFile ScrollConsoleScreenBufferW WaitForSingleObject WriteConsoleA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc GetModuleHandleA RtlUnwind HeapSize

user32

GetWindowLongA RegisterClassA CharLowerBuffW

gdi32

GetCharWidthI GetCharWidthW

advapi32

LogonUserA

Sharing

General

Malware Config

Signatures

File Explorer

dff2e9fb94f1d24b1f48288af0bf9d3bf76dc039f6e270ef2c44eb26e96179af

kernel32

user32

gdi32

advapi32