af7a6ee0abf990315cc0dbdd73aaddd0[.]exe

General

Target
af7a6ee0abf990315cc0dbdd73aaddd0.exe
Size 494KB
Sample220209-vfpx5sbbfr
SHA256 ee293203476eb8ec6158876b33a077ceeba8712de8d8e0d1c0aa665f752ef045
MD5 af7a6ee0abf990315cc0dbdd73aaddd0
SHA1 2a57eb263a1d3a0c55237cef2b70a8aa7d53cd4f
SHA512 95d9b6a79cbf85691caf6b696c7ab19820a2abbac7ec009549ada549fbd72b4f2749f925e927a3610ddfa820df8f001da5bea220978548cba2c66f9b3d4f89e5
SSDEEP 12288:YNKZxCG29QvyTP0tLt9T9rgjgyoH3KuVHCeZh:Yux3gZGLt19rOsnCe
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

af7a6ee0abf990315cc0dbdd73aaddd0.exe

.exe 494KB

af7a6ee0abf990315cc0dbdd73aaddd0.exe

IMPHASH a1c07a7168f5449ce53309d29c4b81b5
SHA256 ee293203476eb8ec6158876b33a077ceeba8712de8d8e0d1c0aa665f752ef045
MD5 af7a6ee0abf990315cc0dbdd73aaddd0
SHA1 2a57eb263a1d3a0c55237cef2b70a8aa7d53cd4f
SHA512 95d9b6a79cbf85691caf6b696c7ab19820a2abbac7ec009549ada549fbd72b4f2749f925e927a3610ddfa820df8f001da5bea220978548cba2c66f9b3d4f89e5
SSDEEP 12288:YNKZxCG29QvyTP0tLt9T9rgjgyoH3KuVHCeZh:Yux3gZGLt19rOsnCe
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12524

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement InterlockedDecrement SetMailslotInfo SetEvent GetConsoleAliasesLengthA GetConsoleTitleA CreateRemoteThread GlobalAlloc LoadLibraryW GetLocaleInfoW SwitchToFiber Sleep GetCalendarInfoW GetVersionExW IsBadStringPtrA GetStringTypeExA LCMapStringA GetProcAddress VirtualAlloc SetStdHandle GetAtomNameA LoadLibraryA UnhandledExceptionFilter DnsHostnameToComputerNameA FoldStringA GetModuleFileNameA SetConsoleTitleW UpdateResourceW GetFileTime DeleteFileW GetConsoleProcessList SetFileAttributesW VirtualQuery GetDefaultCommConfigW GetComputerNameA WriteConsoleW HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA GetLastError SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId CloseHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte CreateFileA GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap WriteConsoleA GetConsoleOutputCP

gdi32

GetCharWidthFloatA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend

Sharing