c9c5d2a609eed2245d3855b52a869f0c[.]exe

General

Target
c9c5d2a609eed2245d3855b52a869f0c.exe
Size 306KB
Sample220201-vah8eahhh7
SHA256 417cf5930321b1851b3e717b221c824155d5e3601a59cd93dfb03bcddd7a12f6
MD5 c9c5d2a609eed2245d3855b52a869f0c
SHA1 437c27f8012c1f95f7f8401d6833cfe8bc11b65f
SHA512 c868753b58d7810530ac06c3ec75310c60581a97c42b767fd8f56838e8866846abfa50de72a172707a7e919498fa504c91b78dd2079aef5b6855d3c1be4878cc
SSDEEP 6144:vG7kI+oJGUjPugEJy7/sJLNy2OiVQ9lsuRmdshRz4L9TSTrpvB:OFxDa/8bsJLCVsuRWsW1STtp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c9c5d2a609eed2245d3855b52a869f0c.exe

.exe 306KB

c9c5d2a609eed2245d3855b52a869f0c.exe

IMPHASH 2d84797c9a0b192c04409f1bc15f9ab6
SHA256 417cf5930321b1851b3e717b221c824155d5e3601a59cd93dfb03bcddd7a12f6
MD5 c9c5d2a609eed2245d3855b52a869f0c
SHA1 437c27f8012c1f95f7f8401d6833cfe8bc11b65f
SHA512 c868753b58d7810530ac06c3ec75310c60581a97c42b767fd8f56838e8866846abfa50de72a172707a7e919498fa504c91b78dd2079aef5b6855d3c1be4878cc
SSDEEP 6144:vG7kI+oJGUjPugEJy7/sJLNy2OiVQ9lsuRmdshRz4L9TSTrpvB:OFxDa/8bsJLCVsuRWsW1STtp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56032

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW FindFirstFileExA GetDriveTypeA FreeEnvironmentStringsW SetProcessPriorityBoost FindNextVolumeW SetCurrentDirectoryA GetLongPathNameA TlsGetValue SetComputerNameExW FindAtomW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection GetCommandLineW InterlockedDecrement GetCalendarInfoA CopyFileW ZombifyActCtx OutputDebugStringW SetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringA GetProcessHeap GlobalWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExA GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW SetLastError WriteProfileSectionW GetCalendarInfoW GetProfileStringA SetConsoleCursorPosition GetLastError DeleteVolumeMountPointA ContinueDebugEvent ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryA GlobalFindAtomA FindNextChangeNotification CreateActCtxA GetMailslotInfo GetPrivateProfileIntA _lread InterlockedExchange DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetSystemTimeAdjustment GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA TryEnterCriticalSection GetPrivateProfileSectionNamesW GetFileAttributesExW LocalFileTimeToFileTime MoveFileW TerminateProcess HeapSetInformation lstrcmpW GetComputerNameA FindActCtxSectionStringA GetThreadContext MoveFileExA GetProcAddress GlobalCompact UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameA OpenEventA SetCommTimeouts WaitNamedPipeW CreateIoCompletionPort GetPrivateProfileSectionNamesA FindResourceExW GetSystemTimeAsFileTime GetSystemInfo FreeEnvironmentStringsA GetLocalTime OpenSemaphoreA SetFileShortNameW lstrcpyW VerLanguageNameA GetThreadSelectorEntry GetSystemTime UnlockFile GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameA GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotA SetCommState SetHandleCount _lopen GetConsoleAliasExesLengthW ResetWriteWatch ClearCommBreak GetOverlappedResult EnumDateFormatsA GetModuleHandleW WriteConsoleOutputCharacterA HeapFree OpenMutexW GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI OpenWaitableTimerW GetCurrentProcess PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameA WriteProfileStringW InitAtomTable GlobalAddAtomW TerminateJobObject SetFirmwareEnvironmentVariableA GetBinaryTypeW QueryDosDeviceA LeaveCriticalSection GetVolumePathNameA CreateNamedPipeA CreateFileA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind MoveFileA GetCommandLineA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW IsDebuggerPresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc FlushFileBuffers GetConsoleMode DebugBreak OutputDebugStringA LoadLibraryW InitializeCriticalSectionAndSpinCount SetStdHandle MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA WriteConsoleA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing