280bc5e2f1429cd8678fa1b40ff28dac[.]exe

General

Target
280bc5e2f1429cd8678fa1b40ff28dac.exe
Size 328KB
Sample220121-kcfj7aefe7
SHA256 534f075ea4fec6ff94b5f6b00bbb8d47fb4f061a57d99be498d07800cba6cc9b
MD5 280bc5e2f1429cd8678fa1b40ff28dac
SHA1 3ba183f405ce42bc63dce87686c425c90f4d8351
SHA512 b6b17cbd31aad58c7313964d7df46c425ab8e8f76012924ec19b023fe2d5993dc3e4250fe49cb98c56b0d30bf77754d47d0f2dd3d3d5862634a4ed1b74fd47b0
SSDEEP 6144:uPkyrVDj+tCGfhwJUr3lu3I9WL9mQ4k5ofYdyvmE:uPjVWtZ8UrVu3II9wk5c
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

280bc5e2f1429cd8678fa1b40ff28dac.exe

.exe 328KB

280bc5e2f1429cd8678fa1b40ff28dac.exe

IMPHASH 74049dfb008e04dc801074b384a97733
SHA256 534f075ea4fec6ff94b5f6b00bbb8d47fb4f061a57d99be498d07800cba6cc9b
MD5 280bc5e2f1429cd8678fa1b40ff28dac
SHA1 3ba183f405ce42bc63dce87686c425c90f4d8351
SHA512 b6b17cbd31aad58c7313964d7df46c425ab8e8f76012924ec19b023fe2d5993dc3e4250fe49cb98c56b0d30bf77754d47d0f2dd3d3d5862634a4ed1b74fd47b0
SSDEEP 6144:uPkyrVDj+tCGfhwJUr3lu3I9WL9mQ4k5ofYdyvmE:uPjVWtZ8UrVu3II9wk5c
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

73552

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock CreateNamedPipeW GetExitCodeProcess DeactivateActCtx GetVersionExW GetConsoleCP GetConsoleAliasesLengthA GetDefaultCommConfigA FindFirstFileExA GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA SetCurrentDirectoryW GetLongPathNameA CopyFileW TlsGetValue LoadResource SetComputerNameExW SystemTimeToTzSpecificLocalTime FindAtomA ReleaseSemaphore CallNamedPipeW CreateMailslotW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryA GlobalAlloc TryEnterCriticalSection GetCommandLineA InterlockedDecrement GetCalendarInfoA DeleteFileA CreateActCtxW OutputDebugStringA SetSystemTimeAdjustment SetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoW GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryA GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionA GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointW DebugBreak GetPrivateProfileSectionW lstrcmpA ReadFileScatter SetConsoleMode GetSystemWindowsDirectoryA TerminateProcess GlobalFindAtomW FindCloseChangeNotification SetTapeParameters SetMailslotInfo InterlockedExchange DefineDosDeviceA FindVolumeMountPointClose EndUpdateResourceW WriteConsoleA GetSystemTimeAdjustment GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructW GetDriveTypeA GetFileAttributesExA FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock lstrcmpW SetDefaultCommConfigA FindActCtxSectionGuid SetThreadContext MoveFileExW GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom OpenEventW TransmitCommChar WaitNamedPipeA GetPrivateProfileSectionNamesW FindResourceExW GetLocalTime SetLocalTime OpenSemaphoreA GetProcAddress SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry SetSystemTime SetConsoleCP GetConsoleAliasW FlushConsoleInputBuffer AllocConsole GetAtomNameW WriteConsoleInputA TransactNamedPipe GetCommState LockFile _lopen GetConsoleAliasExesLengthA GetWriteWatch GetConsoleOutputCP GetModuleHandleA WriteConsoleOutputCharacterW EnumDateFormatsW HeapReAlloc GetCommMask SetFilePointer FindClose SetFileApisToANSI CancelWaitableTimer GetCurrentProcessId SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA AssignProcessToJobObject QueryDosDeviceW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeA CreateIoCompletionPort InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetStartupInfoA WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle CloseHandle CreateFileA

user32

OemToCharW

Sharing