577d894cb539916b5e50410aac17d8ca[.]exe

General

Target
577d894cb539916b5e50410aac17d8ca.exe
Size 353KB
Sample220211-wtqx2aefan
SHA256 f938a7c0ebc32402cc6d0a2535eaac499468a2eadab4d38337fe6ddcce5eb7d2
MD5 577d894cb539916b5e50410aac17d8ca
SHA1 cd9c1e5ad52d3bdca36f4fb4ebfa0f370d03eae9
SHA512 b7d54d08f9b53c2249bf42db566ac80889d9418dafdaa583c3aa2933af0c63f1de247ba9178c433eafffbccfb1137f7ae3676198606d493837d9b7d60c7fe635
SSDEEP 6144:jI3WKD41jGafRmrztp16kK6AxXsbHiq3oFA6W8aRR+ns:jkM1jGMY/tpc7xXsVY66W8Od
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

577d894cb539916b5e50410aac17d8ca.exe

.exe 353KB

577d894cb539916b5e50410aac17d8ca.exe

IMPHASH b581b61ffb08e7ef69f8a8efeb989c9f
SHA256 f938a7c0ebc32402cc6d0a2535eaac499468a2eadab4d38337fe6ddcce5eb7d2
MD5 577d894cb539916b5e50410aac17d8ca
SHA1 cd9c1e5ad52d3bdca36f4fb4ebfa0f370d03eae9
SHA512 b7d54d08f9b53c2249bf42db566ac80889d9418dafdaa583c3aa2933af0c63f1de247ba9178c433eafffbccfb1137f7ae3676198606d493837d9b7d60c7fe635
SSDEEP 6144:jI3WKD41jGafRmrztp16kK6AxXsbHiq3oFA6W8aRR+ns:jkM1jGMY/tpc7xXsVY66W8Od
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45008

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock WaitForSingleObject GetNamedPipeHandleStateW DosDateTimeToFileTime CallNamedPipeA EnumResourceTypesA EnumResourceNamesA TerminateProcess ReleaseActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigA GetCommConfig GetDriveTypeW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeW LeaveCriticalSection WriteConsoleInputW TlsGetValue SetComputerNameExW FindAtomA BuildCommDCBAndTimeoutsW GlobalAlloc EnterCriticalSection GetCommandLineW InterlockedExchange CopyFileA OutputDebugStringA FormatMessageW GetPriorityClass WritePrivateProfileStringA HeapValidate TerminateThread GlobalUnfix GetProcessHeap GetStartupInfoA CreatePipe GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryA WriteProfileSectionA GetCalendarInfoW DebugBreak SetConsoleCursorInfo SetLastError DeleteVolumeMountPointW DebugActiveProcessStop GetConsoleAliasExesLengthW lstrcmpA GetPrivateProfileSectionNamesW IsBadHugeWritePtr GetProcAddress GetSystemWindowsDirectoryA FindCloseChangeNotification CreateActCtxA GetMailslotInfo GetPrivateProfileIntA _lread InterlockedDecrement DefineDosDeviceW SetVolumeMountPointA EndUpdateResourceW WriteConsoleA VirtualProtect GetLastError DeleteCriticalSection GetFileAttributesExA FileTimeToSystemTime GetVolumePathNameW GetConsoleMode HeapSetInformation GetComputerNameA FindActCtxSectionStringW WriteProcessMemory MoveFileExA DisableThreadLibraryCalls GlobalCompact UnregisterWait DeleteAtom FormatMessageA FatalExit InterlockedCompareExchange WaitNamedPipeW SetLocalTime EnumCalendarInfoExW FreeEnvironmentStringsW GetOverlappedResult GetPrivateProfileStructA OpenSemaphoreA SetMailslotInfo lstrcpyW VerLanguageNameW GetFileType SetConsoleCP GetConsoleAliasA GetLargestConsoleWindowSize CreateIoCompletionPort WriteConsoleInputA CreateMailslotW EnumDateFormatsA GetCommState _lopen ResetWriteWatch GetPrivateProfileStringW ClearCommError ChangeTimerQueueTimer SetSystemTime LockFile GetConsoleAliasExesLengthA SetFirmwareEnvironmentVariableW MoveFileW GetConsoleDisplayMode GetSystemDefaultLangID SetFilePointer PostQueuedCompletionStatus AreFileApisANSI OpenWaitableTimerW GetProcessVersion GetNamedPipeHandleStateA FillConsoleOutputCharacterA FindNextVolumeMountPointA WriteProfileStringA AddAtomA WriteConsoleOutputCharacterA QueryInformationJobObject QueryDosDeviceW GetBinaryTypeW InitAtomTable VirtualAlloc InterlockedPushEntrySList LoadLibraryA CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA RaiseException GetCommandLineA IsBadReadPtr GetModuleFileNameW GetCurrentProcess IsDebuggerPresent GetModuleHandleW Sleep InterlockedIncrement ExitProcess GetModuleFileNameA WriteFile GetStdHandle SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleW OutputDebugStringW LoadLibraryW GetConsoleCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle CloseHandle

user32

OemToCharW

advapi32

GetFileSecurityA

winhttp

WinHttpReadData

Sharing