9290373428ffab670e347d1b0f52ceb3[.]exe

General

Target
9290373428ffab670e347d1b0f52ceb3.exe
Size 250KB
Sample220124-ga6f2schgm
SHA256 1e061432a06c9e4935cd837118e5d68d79ec6c6bbdddcc40d8682e50db7344fa
MD5 9290373428ffab670e347d1b0f52ceb3
SHA1 699efbdc4cec837116cd2f1233ff1777f24d3588
SHA512 6b41aef984f19fdbe6ad54a55862ccde636b210e324020e03624c915979e5b238766d178b1e169a8682b0a9cf0e42858ee9592cbbde6805fe47bacdd127be929
SSDEEP 3072:WOqrLVm9to7tYmP5jj9UzcpOL9YxuJUMM/h3Lfed:WFLVoto71jWg8L9YxuJXN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9290373428ffab670e347d1b0f52ceb3.exe

.exe 250KB

9290373428ffab670e347d1b0f52ceb3.exe

IMPHASH 2ea46fd288209af535efaef075889460
SHA256 1e061432a06c9e4935cd837118e5d68d79ec6c6bbdddcc40d8682e50db7344fa
MD5 9290373428ffab670e347d1b0f52ceb3
SHA1 699efbdc4cec837116cd2f1233ff1777f24d3588
SHA512 6b41aef984f19fdbe6ad54a55862ccde636b210e324020e03624c915979e5b238766d178b1e169a8682b0a9cf0e42858ee9592cbbde6805fe47bacdd127be929
SSDEEP 3072:WOqrLVm9to7tYmP5jj9UzcpOL9YxuJUMM/h3Lfed:WFLVoto71jWg8L9YxuJXN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9331

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo FindActCtxSectionGuid InterlockedDecrement SetMailslotInfo GetProfileSectionA GetComputerNameW SetEvent GetConsoleAliasesLengthA SetFileTime GetDateFormatA GlobalAlloc GetFirmwareEnvironmentVariableA SwitchToFiber Sleep DeleteVolumeMountPointW DnsHostnameToComputerNameW lstrcpynW GetAtomNameW RaiseException GetStringTypeExA LCMapStringA GetProcAddress VirtualAlloc PeekConsoleInputW RemoveDirectoryA SetStdHandle SetFileAttributesA LocalAlloc GetModuleFileNameA GetModuleHandleA SetLocaleInfoW GetConsoleTitleW ReadConsoleInputW GetConsoleProcessList lstrcpyW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess GetLastError WriteFile GetStdHandle SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer HeapFree CloseHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

winhttp

WinHttpOpen

Sharing