1b13848f01f08bdefd343f037423e5bb[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
1b13848f01f08bdefd343f037423e5bb.exe
Size 299KB
Sample220218-m6vx3scdf3
SHA256 8e5deff48aade01bd88316b0ab63aea8ace103e876ab762100aa2104fe144d63
MD5 1b13848f01f08bdefd343f037423e5bb
SHA1 52a2bdb6ce7e301621a27a4d8057b4adda5563b7
SHA512 8c715acdec9fab41cf62e40d5084dce8f86b20f3f1ad5f396c294c8460dd7eece4a3c1b274a13191d42ae08e5bca3277155f1be9d5867526d5ac26f196ccc3a1
SSDEEP 3072:YySh0QXnE3lk4mtR05bev6qvw1cKjhgBo1LfRxeyVFuZ1Va2sxkgaBCh5gr3hpT:Y9G3lk4QMOvwuYhLTRdjigaZhp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1b13848f01f08bdefd343f037423e5bb.exe

.exe 299KB

1b13848f01f08bdefd343f037423e5bb.exe

IMPHASH 8aa3ca6803a348717bc5413ccdc97af8
SHA256 8e5deff48aade01bd88316b0ab63aea8ace103e876ab762100aa2104fe144d63
MD5 1b13848f01f08bdefd343f037423e5bb
SHA1 52a2bdb6ce7e301621a27a4d8057b4adda5563b7
SHA512 8c715acdec9fab41cf62e40d5084dce8f86b20f3f1ad5f396c294c8460dd7eece4a3c1b274a13191d42ae08e5bca3277155f1be9d5867526d5ac26f196ccc3a1
SSDEEP 3072:YySh0QXnE3lk4mtR05bev6qvw1cKjhgBo1LfRxeyVFuZ1Va2sxkgaBCh5gr3hpT:Y9G3lk4QMOvwuYhLTRdjigaZhp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22529

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW MoveFileExA InterlockedDecrement WaitNamedPipeA SetVolumeMountPointW InitializeCriticalSection GlobalAlloc GetLocaleInfoW GetVersionExW WriteConsoleW GetAtomNameW GetMailslotInfo CreateMailslotW RaiseException LCMapStringA EnumSystemLocalesA VerifyVersionInfoW GetStdHandle CreateMutexW VirtualAlloc EnterCriticalSection SetFileAttributesA LoadLibraryA GetFileType GetDefaultCommConfigA LoadLibraryExA GetStringTypeW GetConsoleTitleW GetFileTime SetCalendarInfoA LocalFree SwitchToThread GetComputerNameA GetThreadContext GetProcAddress GetVolumeNameForVolumeMountPointA CreateFileA GetConsoleOutputCP InterlockedIncrement Sleep DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetFilePointer CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers WriteConsoleA

user32

MapWindowPoints

gdi32

GetCharWidthFloatA

advapi32

ClearEventLogW

winhttp

WinHttpSetDefaultProxyConfiguration