1a33cc3b7cb44c10e51759034aa6d24b[.]exe

General

Target
1a33cc3b7cb44c10e51759034aa6d24b.exe
Size 702KB
Sample220127-jm45vsheeq
SHA256 084344be9c022c3d243af81f1cf95de2551b7eeb7a5cefebc575b4302debd803
MD5 1a33cc3b7cb44c10e51759034aa6d24b
SHA1 b6c7e3c84b13a22eda050d0c5e6bd356994cf6d5
SHA512 601392a64ebdc62381c80ea6289e69f514c7cd3447711a1d2464a98a242edf729a54bfa406e3cc79c57c5df83e578d73157db137921773bc7f614319e01356f0
SSDEEP 12288:EmWb3+KfdbfrVkRCvKiJM5D5aC/d5pYKJNItZ6vjEiqoQIyWmK1xUTSf+4R1wn0:Eh5hjVkRgFKp5B+K0zPirQExKVn0bo
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1a33cc3b7cb44c10e51759034aa6d24b.exe

.exe 702KB

1a33cc3b7cb44c10e51759034aa6d24b.exe

IMPHASH aa2b22e8e3b96fd546a63d71626f45a6
SHA256 084344be9c022c3d243af81f1cf95de2551b7eeb7a5cefebc575b4302debd803
MD5 1a33cc3b7cb44c10e51759034aa6d24b
SHA1 b6c7e3c84b13a22eda050d0c5e6bd356994cf6d5
SHA512 601392a64ebdc62381c80ea6289e69f514c7cd3447711a1d2464a98a242edf729a54bfa406e3cc79c57c5df83e578d73157db137921773bc7f614319e01356f0
SSDEEP 12288:EmWb3+KfdbfrVkRCvKiJM5D5aC/d5pYKJNItZ6vjEiqoQIyWmK1xUTSf+4R1wn0:Eh5hjVkRgFKp5B+K0zPirQExKVn0bo
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

78720

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateNamedPipeW TerminateThread DeactivateActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointW SetCurrentDirectoryW GetLongPathNameA TlsGetValue SetComputerNameExW FindAtomA BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA CopyFileW ZombifyActCtx OutputDebugStringW GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeap GetProcessHeaps GlobalUnWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringW WriteProfileSectionW GetProfileStringA GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugBreak GetPrivateProfileSectionW ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW TerminateProcess GlobalFindAtomA FindCloseChangeNotification CreateActCtxA SetMailslotInfo InterlockedExchange DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA TryEnterCriticalSection GetFileAttributesExW FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock GetComputerNameA FindActCtxSectionStringA SetThreadContext MoveFileExA GetOverlappedResult GlobalUnlock UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameA OpenEventW SetCommTimeouts WaitNamedPipeA CreateIoCompletionPort FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA FreeEnvironmentStringsA lstrcmpW GetProcAddress GetPrivateProfileSectionNamesA SetFileShortNameW lstrcpyW VerLanguageNameA GetThreadSelectorEntry SetSystemTime UnlockFile GetConsoleCP GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputW TransactNamedPipe SetCommState SetHandleCount _lopen ResetWriteWatch EnumDateFormatsW GetConsoleAliasExesLengthA WriteConsoleOutputCharacterW HeapReAlloc OpenMutexA GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI CancelWaitableTimer GetCurrentProcess GetNamedPipeHandleStateA GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA TerminateJobObject QueryDosDeviceW LeaveCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile OutputDebugStringA GetFileType ExitProcess LoadLibraryW GetModuleFileNameA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount LoadLibraryA GetLocaleInfoW SetStdHandle WriteConsoleA CloseHandle CreateFileA DeleteFileA

user32

OemToCharA

msimg32

AlphaBlend

Sharing