72f16ad81cfff54993dacd79be49db93[.]exe

General

Target
72f16ad81cfff54993dacd79be49db93.exe
Size 595KB
Sample220218-gga9gsbcd4
SHA256 caeb2e0940afbfa4b23dbb65614ebc7dfdb74e7b1ab9c1f764d539322628c289
MD5 72f16ad81cfff54993dacd79be49db93
SHA1 2c059f5818f105605edd8430f9274cc4043fcf96
SHA512 87b6a1f47c69ed8e46a2461f55f335d6a5341756a5414055899ab0cace46ca8bed49ee9c7e1dcb6f9341eac1cc72026fa71716316551bf11c1f0a1602669e9b0
SSDEEP 12288:q40qh2qwM8LdnDcYrBDkR5V6/qkMBEF33C2Kjo+ow:fvr8Ldo0t2183Ujo+ow
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

72f16ad81cfff54993dacd79be49db93.exe

.exe 595KB

72f16ad81cfff54993dacd79be49db93.exe

IMPHASH bb56ca4f4ddd26b18822e1b3509f3217
SHA256 caeb2e0940afbfa4b23dbb65614ebc7dfdb74e7b1ab9c1f764d539322628c289
MD5 72f16ad81cfff54993dacd79be49db93
SHA1 2c059f5818f105605edd8430f9274cc4043fcf96
SHA512 87b6a1f47c69ed8e46a2461f55f335d6a5341756a5414055899ab0cace46ca8bed49ee9c7e1dcb6f9341eac1cc72026fa71716316551bf11c1f0a1602669e9b0
SSDEEP 12288:q40qh2qwM8LdnDcYrBDkR5V6/qkMBEF33C2Kjo+ow:fvr8Ldo0t2183Ujo+ow
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45264

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetComputerNameExA WriteProfileSectionW GetNumaProcessorNode FindFirstVolumeW SetConsoleCursorInfo HeapLock FindFirstChangeNotificationA WaitForSingleObject GetNamedPipeHandleStateA FileTimeToDosDateTime EnumResourceTypesW EnumResourceNamesW ExitProcess TerminateProcess ActivateActCtx GetVersionExA VerifyVersionInfoW GetConsoleOutputCP ResetEvent FindNextFileA GetCompressedFileSizeW CopyFileExW ReadConsoleOutputCharacterA GetDefaultCommConfigW VerLanguageNameA _hread SetCommConfig WritePrivateProfileStructA FreeEnvironmentStringsW CreateTimerQueueTimer FindVolumeClose LeaveCriticalSection WriteConsoleInputA TlsGetValue SetComputerNameExW FindAtomA ReleaseMutex LocalUnlock CallNamedPipeW BuildCommDCBAndTimeoutsA LocalAlloc VerifyVersionInfoA GetCommandLineW InterlockedIncrement CopyFileW AddRefActCtx OutputDebugStringW FormatMessageW GetPriorityClass WritePrivateProfileStringW GetUserDefaultLangID TerminateThread GlobalUnfix GetVersionExW HeapValidate _hwrite GetWindowsDirectoryW GetStartupInfoA CreatePipe GetCPInfoExW GetSystemWindowsDirectoryA GetSystemWow64DirectoryA GetCalendarInfoA DebugBreak GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA OpenFileMappingA GlobalWire GetSystemWindowsDirectoryW CreateActCtxW SetMailslotInfo AddConsoleAliasW GetPrivateProfileIntW ReadConsoleInputW _lread OutputDebugStringA InterlockedDecrement DefineDosDeviceW SetVolumeMountPointW SetThreadIdealProcessor SetConsoleActiveScreenBuffer GetProcessAffinityMask SetThreadContext GetLongPathNameW SetConsoleWindowInfo EndUpdateResourceA ContinueDebugEvent ReadConsoleA WriteConsoleA VirtualProtect BuildCommDCBA InterlockedFlushSList WritePrivateProfileSectionW GetPrivateProfileStructW DeleteCriticalSection GetFileAttributesExW FileTimeToLocalFileTime GetVolumePathNameW GetConsoleMode HeapSetInformation GetComputerNameW FindActCtxSectionStringA ReadProcessMemory MoveFileExW GetProcAddress GlobalFix GlobalDeleteAtom FatalExit InterlockedExchangeAdd WaitNamedPipeA GetPrivateProfileStructA GetExitCodeProcess GetSystemTime GetLocalTime FreeEnvironmentStringsA OpenSemaphoreW EnumCalendarInfoExA GetMailslotInfo lstrcpyA LockFile EndUpdateResourceW GetConsoleCP GetConsoleAliasW GetLargestConsoleWindowSize FindAtomW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW EnumDateFormatsW SetCommState _lopen GetConsoleAliasExesLengthW GetWriteWatch GetPrivateProfileStringW GetModuleHandleA CreateIoCompletionPort LoadLibraryW WriteConsoleOutputAttribute GetFileInformationByHandle GetProfileStringW GetLastError MoveFileW CreateActCtxA GetSystemDefaultLangID LocalLock SetCommMask SetMessageWaitingIndicator AreFileApisANSI OpenWaitableTimerW GetProcessShutdownParameters PeekNamedPipe FillConsoleOutputCharacterW FindNextVolumeMountPointW GetThreadPriority DeleteAtom AddAtomW WriteConsoleOutputCharacterA AssignProcessToJobObject QueryDosDeviceW EnterCriticalSection GetConsoleAliasExesW GetBinaryTypeA DeleteFileA RaiseException GetCommandLineA IsBadReadPtr GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent CloseHandle GetModuleHandleW Sleep TlsAlloc TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleW SetStdHandle FlushFileBuffers MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CreateFileA

user32

OemToCharW

Sharing