1138566c2dc75fd97735373798d050b6[.]exe

General

Target
1138566c2dc75fd97735373798d050b6.exe
Size 444KB
Sample220126-qlnj2sded3
SHA256 8370bc92f5cb661bd26f3bd5abb51f6d56c48acb438ae48aa3351044cd55678f
MD5 1138566c2dc75fd97735373798d050b6
SHA1 8b6fbc0d77a58352a47f22967c75587e035eb357
SHA512 e7105354c1031909d4c6365d37890c019030b4f0572c8082a663b36a4c99fa56baf22e850ef88801730221470f587fd866792d9d324335ecb0c48306e089b780
SSDEEP 6144:DF7tjrH2bZgOhRRxxLhCaigqdFKS8eGTvKdFj9ma3qJBgDnY598ICrcKHVg1GhW:DFBa73NYFgqjKNe399j3mgDmtyKoW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1138566c2dc75fd97735373798d050b6.exe

.exe 444KB

1138566c2dc75fd97735373798d050b6.exe

IMPHASH 747024b1d04ad78d24e3aa224d333747
SHA256 8370bc92f5cb661bd26f3bd5abb51f6d56c48acb438ae48aa3351044cd55678f
MD5 1138566c2dc75fd97735373798d050b6
SHA1 8b6fbc0d77a58352a47f22967c75587e035eb357
SHA512 e7105354c1031909d4c6365d37890c019030b4f0572c8082a663b36a4c99fa56baf22e850ef88801730221470f587fd866792d9d324335ecb0c48306e089b780
SSDEEP 6144:DF7tjrH2bZgOhRRxxLhCaigqdFKS8eGTvKdFj9ma3qJBgDnY598ICrcKHVg1GhW:DFBa73NYFgqjKNe399j3mgDmtyKoW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

78656

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateNamedPipeW TerminateThread DeactivateActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleCP GetDefaultCommConfigW FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointW SetCurrentDirectoryW GetLongPathNameA TlsGetValue SetComputerNameExA FindAtomA BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA CopyFileW ZombifyActCtx OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryA GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionW GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugBreak GetPrivateProfileSectionW ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW TerminateProcess GlobalFindAtomA FindCloseChangeNotification CreateActCtxW SetMailslotInfo InterlockedExchange DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleA GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA TryEnterCriticalSection GetFileAttributesExW FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock GetComputerNameW FindActCtxSectionStringA SetThreadContext MoveFileExA GetOverlappedResult GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom GetBinaryTypeA OpenEventW SetCommTimeouts WaitNamedPipeA CreateIoCompletionPort FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA FreeEnvironmentStringsA lstrcmpW GetProcAddress GetPrivateProfileSectionNamesA SetFileShortNameW lstrcpyW VerLanguageNameA GetThreadSelectorEntry SetSystemTime UnlockFile GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputA TransactNamedPipe GetCommState LockFile _lopen ResetWriteWatch GetConsoleOutputCP EnumDateFormatsW GetConsoleAliasExesLengthA WriteConsoleOutputCharacterW HeapReAlloc OpenMutexA GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI CancelWaitableTimer GetCurrentProcess SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointA GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA TerminateJobObject QueryDosDeviceW LeaveCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount LoadLibraryA GetLocaleInfoW SetStdHandle CloseHandle CreateFileA DeleteFileA

user32

OemToCharA

msimg32

AlphaBlend

Sharing