a2ae1bbc3aa8ac070de9a105f500d8d9[.]exe

General

Target
a2ae1bbc3aa8ac070de9a105f500d8d9.exe
Size 595KB
Sample220218-erx5wsbdbj
SHA256 21fe47c1ec28c406ad49dfeffa4dbae703a86b9ae7f93695d0d69aa58e408b3a
MD5 a2ae1bbc3aa8ac070de9a105f500d8d9
SHA1 92b5e9147a25a27e79413c8143c9e1077c07d974
SHA512 6317319b1bf8bc14077107ab41a19aa61ae605d4339571b09960c9f277545b53ee88916510a5dc111a4dea1cb02ea71c4118a954ee878851a345b8c26c527b6b
SSDEEP 12288:RXDD4SyaZ/HCGD8LUAu0BdJL+hrulC59MuX9+fe:NHZ/HhC40B/Laryoqxfe
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a2ae1bbc3aa8ac070de9a105f500d8d9.exe

.exe 595KB

a2ae1bbc3aa8ac070de9a105f500d8d9.exe

IMPHASH 84a42a12f2bbc8b1d3328617af7521d0
SHA256 21fe47c1ec28c406ad49dfeffa4dbae703a86b9ae7f93695d0d69aa58e408b3a
MD5 a2ae1bbc3aa8ac070de9a105f500d8d9
SHA1 92b5e9147a25a27e79413c8143c9e1077c07d974
SHA512 6317319b1bf8bc14077107ab41a19aa61ae605d4339571b09960c9f277545b53ee88916510a5dc111a4dea1cb02ea71c4118a954ee878851a345b8c26c527b6b
SSDEEP 12288:RXDD4SyaZ/HCGD8LUAu0BdJL+hrulC59MuX9+fe:NHZ/HhC40B/Laryoqxfe
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45056

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetComputerNameExA WriteProfileSectionW GetNumaProcessorNode FindFirstVolumeW SetConsoleCursorInfo HeapLock FindFirstChangeNotificationA WaitForSingleObject GetNamedPipeHandleStateA FileTimeToDosDateTime EnumResourceTypesW EnumResourceNamesW ExitProcess GetExitCodeProcess ActivateActCtx GetVersionExA VerifyVersionInfoW GetConsoleOutputCP ResetEvent FindNextFileA GetCompressedFileSizeW CopyFileExW ReadConsoleOutputCharacterA GetDefaultCommConfigW VerLanguageNameA _hread SetCommConfig WritePrivateProfileStructA FreeEnvironmentStringsW CreateTimerQueueTimer FindVolumeClose LeaveCriticalSection WriteConsoleInputA TlsGetValue SetComputerNameExW FindAtomA BuildCommDCBAndTimeoutsA LocalAlloc VerifyVersionInfoA GetCommandLineW InterlockedIncrement CopyFileW AddRefActCtx OutputDebugStringW FormatMessageW GetPriorityClass WritePrivateProfileStringW GetUserDefaultLangID TerminateThread GlobalUnfix HeapValidate GetStartupInfoA CreatePipe GetCPInfoExW GetSystemWindowsDirectoryA WriteProfileSectionA GetCalendarInfoA DebugBreak GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA OpenFileMappingA GlobalWire GetSystemWindowsDirectoryW CreateActCtxW SetMailslotInfo AddConsoleAliasW GetPrivateProfileIntW ReadConsoleInputW _lread OutputDebugStringA InterlockedDecrement DefineDosDeviceW SetVolumeMountPointW SetThreadIdealProcessor SetConsoleActiveScreenBuffer GetProcessAffinityMask SetThreadContext GetLongPathNameW SetConsoleWindowInfo EndUpdateResourceA ContinueDebugEvent ReadConsoleA WriteConsoleA VirtualProtect BuildCommDCBA InterlockedFlushSList WritePrivateProfileSectionW GetPrivateProfileStructW DeleteCriticalSection GetFileAttributesExW FileTimeToLocalFileTime GetVolumePathNameW GetConsoleMode HeapSetInformation GetComputerNameW FindActCtxSectionStringA ReadProcessMemory MoveFileExW GetProcAddress GlobalFix GlobalDeleteAtom FatalExit InterlockedExchangeAdd WaitNamedPipeA GetPrivateProfileStructA GetSystemTime GetLocalTime FreeEnvironmentStringsA OpenSemaphoreW EnumCalendarInfoExA GetMailslotInfo lstrcpyA LockFile EndUpdateResourceW GetConsoleCP GetConsoleAliasW GetLargestConsoleWindowSize FindAtomW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW EnumDateFormatsW SetCommState _lopen GetConsoleAliasExesLengthW GetWriteWatch GetPrivateProfileStringW GetModuleHandleA CreateIoCompletionPort LoadLibraryW WriteConsoleOutputAttribute GetFileInformationByHandle GetProfileStringW GetLastError MoveFileW CreateActCtxA GetSystemDefaultLangID LocalLock SetCommMask SetMessageWaitingIndicator AreFileApisANSI OpenWaitableTimerA GetProcessShutdownParameters PeekNamedPipe FillConsoleOutputCharacterW FindNextVolumeMountPointW GetThreadPriority DeleteAtom AddAtomW WriteConsoleOutputCharacterA AssignProcessToJobObject QueryDosDeviceW EnterCriticalSection GetConsoleAliasExesW GetBinaryTypeA DeleteFileA RaiseException GetCommandLineA IsBadReadPtr GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent CloseHandle GetModuleHandleW Sleep TlsAlloc TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleW SetStdHandle FlushFileBuffers MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CreateFileA

user32

OemToCharW

Sharing