084867eab2023c445721b0cd205ce47a[.]exe

General

Target
084867eab2023c445721b0cd205ce47a.exe
Size 419KB
Sample220115-kkxhnsdham
SHA256 5d9dc24f2de724f0921574f0589d39f79cbdd85cc817a6345267aa9aa9632a2b
MD5 084867eab2023c445721b0cd205ce47a
SHA1 0f465ee53425b4c9a963f6ecfe1119840fa810d7
SHA512 58ec053935a7d8e2f206f3ecf76ab575dcf95736f1f23c2b8944ff4e5c31b3f6faaef20cd959a8206003c298e82770f456261a3122f815dd6347f08dd1992c3c
SSDEEP 6144:pryICqvsNS64vmvH3uSlMe1DjJY4aUWXCZnMDHzfA2PjdlIJfD0:pryIC2SHhMexi48y1MDTfA2dlq
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

084867eab2023c445721b0cd205ce47a.exe

.exe 419KB

084867eab2023c445721b0cd205ce47a.exe

IMPHASH cfc1be3ef30447c889df3bb658d73d71
SHA256 5d9dc24f2de724f0921574f0589d39f79cbdd85cc817a6345267aa9aa9632a2b
MD5 084867eab2023c445721b0cd205ce47a
SHA1 0f465ee53425b4c9a963f6ecfe1119840fa810d7
SHA512 58ec053935a7d8e2f206f3ecf76ab575dcf95736f1f23c2b8944ff4e5c31b3f6faaef20cd959a8206003c298e82770f456261a3122f815dd6347f08dd1992c3c
SSDEEP 6144:pryICqvsNS64vmvH3uSlMe1DjJY4aUWXCZnMDHzfA2PjdlIJfD0:pryIC2SHhMexi48y1MDTfA2dlq
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

221104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeactivateActCtx GetVersionExW SetConsoleCP GetConsoleAliasesLengthA GetDefaultCommConfigA FindFirstFileExW GetDriveTypeA FreeEnvironmentStringsA SetProcessPriorityBoost SetVolumeMountPointW GetLongPathNameW CopyFileA TlsGetValue SetConsoleCursorInfo SetComputerNameExA SystemTimeToTzSpecificLocalTime FindAtomA ReleaseSemaphore CallNamedPipeA CreateMailslotA BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryA LocalAlloc TryEnterCriticalSection GetCommandLineW InterlockedDecrement GetCalendarInfoA DeleteFileA CreateActCtxW CreateRemoteThread SetSystemTimeAdjustment SetPriorityClass WritePrivateProfileStringW GetProcessHeaps GetProcessHeap GlobalUnWire ReadConsoleOutputCharacterW GetStartupInfoW GetDiskFreeSpaceExA GetCPInfoExA GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringW WriteProfileSectionW GetProfileStringA GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugBreak lstrcmpA ReadFileScatter SetConsoleMode GetVersion GetSystemWindowsDirectoryW GlobalFindAtomA FindCloseChangeNotification GetTapeParameters SetMailslotInfo InterlockedExchange DefineDosDeviceW FindVolumeMountPointClose EndUpdateResourceA WriteConsoleW GetSystemTimeAdjustment WritePrivateProfileSectionA GetPrivateProfileStructW GetFileAttributesExA MoveFileW GetVolumePathNameA HeapUnlock GetExitCodeProcess SetDefaultCommConfigW FindActCtxSectionGuid ResetEvent GetThreadContext MoveFileExW GetProcAddress GlobalLock UnregisterWaitEx BuildCommDCBW PeekConsoleInputW GetBinaryTypeW CreateSemaphoreW TransmitCommChar WaitNamedPipeA GetOverlappedResult GetPrivateProfileSectionNamesW FindResourceExW EnumTimeFormatsW GetLocalTime CreateSemaphoreA FreeEnvironmentStringsW GetPrivateProfileSectionW SetFileShortNameA lstrcpyA VerLanguageNameW SetThreadExecutionState SetSystemTime LockFile VerSetConditionMask GetConsoleAliasA FlushConsoleInputBuffer FreeConsole GetAtomNameW GetConsoleAliasExesLengthA WriteConsoleInputW TransactNamedPipe EnumDateFormatsA SetCommState FileTimeToLocalFileTime _lopen GetConsoleAliasExesLengthW GetWriteWatch GetModuleHandleW WriteConsoleOutputCharacterA GetConsoleMode HeapFree OpenMutexA LocalLock GetCommMask SetEndOfFile FindClose CreateIoCompletionPort SetFileApisToANSI CancelWaitableTimer GetProcessHandleCount UnregisterWait GetConsoleAliasesLengthW GetCurrentProcessId lstrcpynA SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringA DeleteAtom GlobalAddAtomW AssignProcessToJobObject QueryDosDeviceW InitializeCriticalSection Process32NextW SetCurrentDirectoryA GetBinaryTypeA lstrcmpW TerminateProcess MoveFileA RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetModuleHandleA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue GetCurrentThreadId TlsFree Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar GetStringTypeA GetStringTypeW WideCharToMultiByte LCMapStringA LCMapStringW GetLocaleInfoA SetFilePointer GetConsoleCP FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

advapi32

GetFileSecurityA

Name

.text

Size

356KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bewure

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.konupef

Size

512B

Virtual Size

234B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.papoge

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

084867eab2023c445721b0cd205ce47a.exe

kernel32

advapi32