aed98686d481bab51b05afb2ee65c66c[.]exe

General

Target
aed98686d481bab51b05afb2ee65c66c.exe
Size 308KB
Sample220201-vctrxshfdn
SHA256 e5f8df07e045106e1c7f01386103b336fed7f95f8dca6f54804cc32d46ad1680
MD5 aed98686d481bab51b05afb2ee65c66c
SHA1 9cd22c1a0e67ec6a5a8f0303bf66f69aeab9aa0f
SHA512 446ca1400f78a7e031e5fed255665b64b5615673dad9af99000d0d4e33e289194a75eac89100f2bf0ec45af3a0b8484571b07bbb15b2ad51ed18570549b91cef
SSDEEP 6144:+uEp28maMtSjM4Px8QB5GTdWqvO+I6iSLL7w5+Qw5lNUAg5XX2o:+BxJMUQ2Wo5GTdWqvZiSLg+Qw54AaX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

aed98686d481bab51b05afb2ee65c66c.exe

.exe 308KB

aed98686d481bab51b05afb2ee65c66c.exe

IMPHASH 2dce05c2af9200495a262edc4b988bb5
SHA256 e5f8df07e045106e1c7f01386103b336fed7f95f8dca6f54804cc32d46ad1680
MD5 aed98686d481bab51b05afb2ee65c66c
SHA1 9cd22c1a0e67ec6a5a8f0303bf66f69aeab9aa0f
SHA512 446ca1400f78a7e031e5fed255665b64b5615673dad9af99000d0d4e33e289194a75eac89100f2bf0ec45af3a0b8484571b07bbb15b2ad51ed18570549b91cef
SSDEEP 6144:+uEp28maMtSjM4Px8QB5GTdWqvO+I6iSLL7w5+Qw5lNUAg5XX2o:+BxJMUQ2Wo5GTdWqvZiSLg+Qw54AaX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56112

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW FindFirstFileExA GetDriveTypeA FreeEnvironmentStringsW SetProcessPriorityBoost FindNextVolumeW SetCurrentDirectoryA GetLongPathNameA TlsGetValue SetComputerNameExA FindAtomW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection GetCommandLineW InterlockedDecrement GetCalendarInfoA CopyFileA ZombifyActCtx OutputDebugStringW SetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringA GetProcessHeap GlobalWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExA GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError WriteProfileSectionW GetCalendarInfoW GetProfileStringA SetConsoleCursorPosition GetLastError DeleteVolumeMountPointW ContinueDebugEvent WriteFile GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryA GlobalFindAtomA FindNextChangeNotification CreateActCtxA GetMailslotInfo GetPrivateProfileIntA _lread DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA TryEnterCriticalSection GetPrivateProfileSectionNamesW GetFileAttributesExW LocalFileTimeToFileTime MoveFileW GetVolumePathNameA TerminateProcess lstrcmpW GetComputerNameA FindActCtxSectionStringA GetThreadContext MoveFileExA GetProcAddress GlobalCompact UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameA OpenEventA SetCommTimeouts WaitNamedPipeW CreateIoCompletionPort GetPrivateProfileSectionNamesA FindResourceExW GetSystemTimeAsFileTime GetSystemInfo FreeEnvironmentStringsA GetLocalTime OpenSemaphoreA WriteProfileStringA SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry GetSystemTime UnlockFile GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameA WriteConsoleInputW CreateMailslotA SetCommState SetHandleCount _lopen ResetWriteWatch ClearCommBreak GetModuleHandleW GetOverlappedResult EnumDateFormatsA GetConsoleAliasExesLengthW WriteConsoleOutputCharacterA HeapFree OpenMutexW GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI OpenWaitableTimerW GetCurrentProcess PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameA WriteProfileStringW InitAtomTable GlobalAddAtomW TerminateJobObject SetFirmwareEnvironmentVariableA GetBinaryTypeW LeaveCriticalSection QueryDosDeviceA HeapSetInformation CreateNamedPipeA CreateFileA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind MoveFileA GetCommandLineA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW IsDebuggerPresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc FlushFileBuffers GetConsoleMode DebugBreak OutputDebugStringA LoadLibraryW InitializeCriticalSectionAndSpinCount SetStdHandle MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA WriteConsoleA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing