57620fe23fe46b9b50f5ec40bdc6b8fa[.]exe

General

Target
57620fe23fe46b9b50f5ec40bdc6b8fa.exe
Size 419KB
Sample220116-p5sgnsfdf9
SHA256 d1a299c8b89530ee091ceeb89c172bdd9317816825b68926b0e368714e74d27f
MD5 57620fe23fe46b9b50f5ec40bdc6b8fa
SHA1 fe38a4e6d66ad1cc621ea39e3d344d1fcd6227d2
SHA512 671cd11456cc62533acfd62693db39488aa8964db4f4b4729ec1305b8b5550798bd1eae4107957eb5bc1b29d6023c8f28b0f33ccaf21a2b7169e5bf49125f1a3
SSDEEP 6144:1qH4z36C4T4+vJSMo6NH3IuMcWml++Em3aH5WO7qxCico7BEn8Zr1:1q5C64eGuMcWO+o3GzexCoyn85
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

57620fe23fe46b9b50f5ec40bdc6b8fa.exe

.exe 419KB

57620fe23fe46b9b50f5ec40bdc6b8fa.exe

IMPHASH e35f8b1f81e9ff2dab196a397d763305
SHA256 d1a299c8b89530ee091ceeb89c172bdd9317816825b68926b0e368714e74d27f
MD5 57620fe23fe46b9b50f5ec40bdc6b8fa
SHA1 fe38a4e6d66ad1cc621ea39e3d344d1fcd6227d2
SHA512 671cd11456cc62533acfd62693db39488aa8964db4f4b4729ec1305b8b5550798bd1eae4107957eb5bc1b29d6023c8f28b0f33ccaf21a2b7169e5bf49125f1a3
SSDEEP 6144:1qH4z36C4T4+vJSMo6NH3IuMcWml++Em3aH5WO7qxCico7BEn8Zr1:1q5C64eGuMcWO+o3GzexCoyn85
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

221184

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeactivateActCtx GetVersionExW SetConsoleCP GetConsoleAliasesLengthA GetDefaultCommConfigA FindFirstFileExW GetDriveTypeA FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointW GetLongPathNameW CopyFileW TlsGetValue GetConsoleCursorInfo SetComputerNameExW SystemTimeToTzSpecificLocalTime FindAtomA ReleaseSemaphore CallNamedPipeA CreateMailslotW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryA LocalAlloc TryEnterCriticalSection GetCommandLineW InterlockedDecrement GetCalendarInfoA DeleteFileA CreateActCtxW CreateRemoteThread SetSystemTimeAdjustment SetPriorityClass WritePrivateProfileStringW GetProcessHeap GlobalUnWire ReadConsoleOutputCharacterW GetStartupInfoW GetDiskFreeSpaceExA GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryW GetProfileStringW WriteProfileSectionA GetProfileStringA GetLastError DeleteVolumeMountPointA DebugBreak GetPrivateProfileSectionW lstrcmpA ReadFileScatter SetConsoleMode GetSystemWindowsDirectoryW TerminateProcess GlobalFindAtomA FindCloseChangeNotification GetTapeParameters SetMailslotInfo InterlockedExchange DefineDosDeviceW FindVolumeMountPointClose EndUpdateResourceA WriteConsoleA GetSystemTimeAdjustment GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA GetFileAttributesExA Process32NextW MoveFileW GetVolumePathNameA HeapUnlock lstrcmpW GetExitCodeProcess FindActCtxSectionGuid ResetEvent GetThreadContext MoveFileExW GlobalUnlock UnregisterWaitEx BuildCommDCBA PeekConsoleInputW GetBinaryTypeW CreateSemaphoreW TransmitCommChar WaitNamedPipeA GetOverlappedResult GetPrivateProfileSectionNamesW FindResourceExW EnumTimeFormatsW GetLocalTime OpenSemaphoreA GetProcAddress SetFileShortNameA lstrcpyW VerLanguageNameW SetThreadExecutionState SetSystemTime LockFile VerSetConditionMask GetConsoleAliasA FlushConsoleInputBuffer AllocConsole GetAtomNameW GetConsoleAliasExesLengthA WriteConsoleInputW TransactNamedPipe EnumDateFormatsA GetCommState FileTimeToLocalFileTime _lopen GetConsoleAliasExesLengthW GetWriteWatch FreeEnvironmentStringsA GetModuleHandleW WriteConsoleOutputCharacterA GetConsoleMode HeapReAlloc OpenMutexA LocalLock GetCommMask SetEndOfFile FindClose SetFileApisToANSI CancelWaitableTimer GetProcessHandleCount RegisterWaitForSingleObject GetConsoleAliasesLengthW GetCurrentProcessId lstrcpynA SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringA DeleteAtom GlobalAddAtomW AssignProcessToJobObject QueryDosDeviceW InitializeCriticalSection Process32FirstW SetCurrentDirectoryA GetBinaryTypeA CreateIoCompletionPort SetDefaultCommConfigA TerminateThread MoveFileA RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetModuleHandleA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar GetStringTypeA GetStringTypeW WideCharToMultiByte LCMapStringA LCMapStringW GetLocaleInfoA SetFilePointer GetConsoleCP FlushFileBuffers SetStdHandle GetConsoleOutputCP CloseHandle CreateFileA

user32

OemToCharA

advapi32

GetFileSecurityW

Name

.text

Size

356KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kewese

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.laroy

Size

512B

Virtual Size

234B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lesipet

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

57620fe23fe46b9b50f5ec40bdc6b8fa.exe

kernel32

user32

advapi32