e4fcdcf521f7a8f73246e1e7ad443baa[.]exe

General

Target
e4fcdcf521f7a8f73246e1e7ad443baa.exe
Size 444KB
Sample220126-1c4vsabba5
SHA256 51ff857aa106cf4a31812aa2dd73dcd068cb4f03ae671be10dbee942a66ee488
MD5 e4fcdcf521f7a8f73246e1e7ad443baa
SHA1 b8b2618cb65ab1dca605bbb3b63e2ed946f7a720
SHA512 9433ac946af5babb8cbacd840a52c58588b4071b5aad2ff7b19ee3d09047515c5ca562c74f31d1994cac3335ba7ffc2b5f6ad72d602b44b8700a6a2dfd1d38df
SSDEEP 12288:Cd6C+WYVJI1B3Q5UNxxbv2T1XqWBOFJ1dfMIb:ChAG1B3og/T2JpOFJb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e4fcdcf521f7a8f73246e1e7ad443baa.exe

.exe 444KB

e4fcdcf521f7a8f73246e1e7ad443baa.exe

IMPHASH aa2b22e8e3b96fd546a63d71626f45a6
SHA256 51ff857aa106cf4a31812aa2dd73dcd068cb4f03ae671be10dbee942a66ee488
MD5 e4fcdcf521f7a8f73246e1e7ad443baa
SHA1 b8b2618cb65ab1dca605bbb3b63e2ed946f7a720
SHA512 9433ac946af5babb8cbacd840a52c58588b4071b5aad2ff7b19ee3d09047515c5ca562c74f31d1994cac3335ba7ffc2b5f6ad72d602b44b8700a6a2dfd1d38df
SSDEEP 12288:Cd6C+WYVJI1B3Q5UNxxbv2T1XqWBOFJ1dfMIb:ChAG1B3og/T2JpOFJb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

78720

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateNamedPipeW TerminateThread DeactivateActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointW SetCurrentDirectoryW GetLongPathNameA TlsGetValue SetComputerNameExW FindAtomA BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA CopyFileW ZombifyActCtx OutputDebugStringW GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeap GetProcessHeaps GlobalUnWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringW WriteProfileSectionW GetProfileStringA GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugBreak GetPrivateProfileSectionW ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW TerminateProcess GlobalFindAtomA FindCloseChangeNotification CreateActCtxA SetMailslotInfo InterlockedExchange DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA TryEnterCriticalSection GetFileAttributesExW FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock GetComputerNameA FindActCtxSectionStringA SetThreadContext MoveFileExA GetOverlappedResult GlobalUnlock UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameA OpenEventW SetCommTimeouts WaitNamedPipeA CreateIoCompletionPort FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA FreeEnvironmentStringsA lstrcmpW GetProcAddress GetPrivateProfileSectionNamesA SetFileShortNameW lstrcpyW VerLanguageNameA GetThreadSelectorEntry SetSystemTime UnlockFile GetConsoleCP GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputW TransactNamedPipe SetCommState SetHandleCount _lopen ResetWriteWatch EnumDateFormatsW GetConsoleAliasExesLengthA WriteConsoleOutputCharacterW HeapReAlloc OpenMutexA GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI CancelWaitableTimer GetCurrentProcess GetNamedPipeHandleStateA GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA TerminateJobObject QueryDosDeviceW LeaveCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile OutputDebugStringA GetFileType ExitProcess LoadLibraryW GetModuleFileNameA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount LoadLibraryA GetLocaleInfoW SetStdHandle WriteConsoleA CloseHandle CreateFileA DeleteFileA

user32

OemToCharA

msimg32

AlphaBlend

Sharing