58b5a1ee5970b3b08898a97aab05b028[.]exe

General

Target
58b5a1ee5970b3b08898a97aab05b028.exe
Size 444KB
Sample220126-pcltesdab7
SHA256 b53a0ad10996f4528bf181dccec2327fbd8b2bd0a9d2095c6bf3b422b25921e8
MD5 58b5a1ee5970b3b08898a97aab05b028
SHA1 72be81aa6598c5f3b945f13397ff7df4324d12c4
SHA512 866db779701d8e4a76b3c809d548ae2a66f89da39865f2a3d65dcd333e8cd50e22910d9aa5b9454cb6366c0dcbdfdafdd5ca8cdd9594eb85c8c7374db946a9b2
SSDEEP 6144:wULFQvY2kU8a1PSuUxqnOQhnC0/XcY91j5Y3uJVzrT5RlI6Je3Dt5vuyqpb9Q6j:wUZ0t/UAO8nCUcY9EuJ9rT586q2v9R
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

58b5a1ee5970b3b08898a97aab05b028.exe

.exe 444KB

58b5a1ee5970b3b08898a97aab05b028.exe

IMPHASH afd7576f854d2aadccbaf37a01b18fbf
SHA256 b53a0ad10996f4528bf181dccec2327fbd8b2bd0a9d2095c6bf3b422b25921e8
MD5 58b5a1ee5970b3b08898a97aab05b028
SHA1 72be81aa6598c5f3b945f13397ff7df4324d12c4
SHA512 866db779701d8e4a76b3c809d548ae2a66f89da39865f2a3d65dcd333e8cd50e22910d9aa5b9454cb6366c0dcbdfdafdd5ca8cdd9594eb85c8c7374db946a9b2
SSDEEP 6144:wULFQvY2kU8a1PSuUxqnOQhnC0/XcY91j5Y3uJVzrT5RlI6Je3Dt5vuyqpb9Q6j:wUZ0t/UAO8nCUcY9EuJ9rT586q2v9R
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

78896

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock CreateNamedPipeW TerminateThread DeactivateActCtx GetConsoleAliasesLengthA GetVersionExW GetConsoleCP GetDefaultCommConfigW FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA SetCurrentDirectoryW GetLongPathNameA TlsGetValue SetComputerNameExA FindAtomA BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryA GlobalAlloc TryEnterCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA CopyFileW ZombifyActCtx OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionA GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugBreak GetPrivateProfileSectionW ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryA TerminateProcess GlobalFindAtomA FindCloseChangeNotification CreateActCtxW SetMailslotInfo InterlockedExchange DefineDosDeviceA FindVolumeMountPointClose EndUpdateResourceA WriteConsoleA GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA GetPrivateProfileSectionNamesA GetFileAttributesExA FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock SetDefaultCommConfigA FindActCtxSectionStringA SetThreadContext MoveFileExA GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom GetBinaryTypeA OpenEventW SetCommTimeouts WaitNamedPipeA GetPrivateProfileSectionNamesW FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA lstrcmpW GetProcAddress CreateIoCompletionPort SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry SetSystemTime GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputA TransactNamedPipe GetCommState _lopen ResetWriteWatch GetConsoleOutputCP GetModuleHandleA EnumDateFormatsW LockFile GetConsoleAliasExesLengthA WriteConsoleOutputCharacterW HeapReAlloc OpenMutexA GetStringTypeW SetFilePointer PostQueuedCompletionStatus SetFileApisToANSI CancelWaitableTimer GetCurrentProcess SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA TerminateJobObject QueryDosDeviceW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle CloseHandle CreateFileA DeleteFileA

user32

OemToCharA

msimg32

AlphaBlend

Sharing