b321222fdf3c98a7fc8c013edb5bbec2[.]exe

General

Target
b321222fdf3c98a7fc8c013edb5bbec2.exe
Size 269KB
Sample220120-hm3flageer
SHA256 9a2bd09d8065bb3733599fb8b64ec30e97326256849b268b8f94d4f655dac981
MD5 b321222fdf3c98a7fc8c013edb5bbec2
SHA1 8d9734ef3b9b0fae5540abd06905a2718e5f0a5d
SHA512 0c7a7627d7d6d94bca92744b3af7bad5980b17e7cbb37edf440c059119023fa6e0cdbf9fe68d0a7fac2a04a881a7128411ef1f3f1e2c56047698cc5b917fb379
SSDEEP 3072:KrVm5rx+q2fNiNWTgpeiXA54yIkm41qeBdQM/h3:+Vm5x+q/WTgpFNQV4SdQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b321222fdf3c98a7fc8c013edb5bbec2.exe

.exe 269KB

b321222fdf3c98a7fc8c013edb5bbec2.exe

IMPHASH b599c41ba6f3d2fcbb28babbce596599
SHA256 9a2bd09d8065bb3733599fb8b64ec30e97326256849b268b8f94d4f655dac981
MD5 b321222fdf3c98a7fc8c013edb5bbec2
SHA1 8d9734ef3b9b0fae5540abd06905a2718e5f0a5d
SHA512 0c7a7627d7d6d94bca92744b3af7bad5980b17e7cbb37edf440c059119023fa6e0cdbf9fe68d0a7fac2a04a881a7128411ef1f3f1e2c56047698cc5b917fb379
SSDEEP 3072:KrVm5rx+q2fNiNWTgpeiXA54yIkm41qeBdQM/h3:+Vm5x+q/WTgpFNQV4SdQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14752

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement SetMailslotInfo GetComputerNameW GetTimeFormatA SetEvent SleepEx GetModuleHandleW GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW CreateRemoteThread FindActCtxSectionStringA ReadConsoleInputA GetStringTypeExW GetFileAttributesW GetOverlappedResult SetLocaleInfoA LCMapStringA GetLongPathNameW GetProcAddress VirtualAlloc SetStdHandle GetAtomNameA UnhandledExceptionFilter LocalAlloc DnsHostnameToComputerNameA GetModuleFileNameA GetModuleHandleA GetConsoleTitleW WriteProfileStringW GetFileTime GetProfileSectionW lstrcpyW CreateThread MultiByteToWideChar GetLastError HeapReAlloc HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer HeapCreate VirtualFree CloseHandle WriteFile LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA ReadFile FlushFileBuffers HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ReportEventA

winhttp

WinHttpSetDefaultProxyConfiguration

Sharing