5849a1bf8ad1b9c53480cc40615bcb0f[.]exe

General

Target
5849a1bf8ad1b9c53480cc40615bcb0f.exe
Size 525KB
Sample220220-xvxmmsbfa2
SHA256 03fc818962bef15922b1098bfd60581bab3372d0bd717a932c19af5162d7b0a2
MD5 5849a1bf8ad1b9c53480cc40615bcb0f
SHA1 05bce2d9464393851b5e78f11c56b4a7036ae8c1
SHA512 c6cdf114352870131cf92d8744162f1064ed7c3500284f23379ca3dec3e96dfe98f9d911b173cc4a8af27980c610fcb76118233dfcb5695f559f840328c4a1d0
SSDEEP 12288:h4erXg8e/UZRW1KBBQ7qp5S30dWw2nHta:h4eyUZg87QGp5SXwuH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5849a1bf8ad1b9c53480cc40615bcb0f.exe

.exe 525KB

5849a1bf8ad1b9c53480cc40615bcb0f.exe

IMPHASH 56046f485ab533b128b31921ba255f72
SHA256 03fc818962bef15922b1098bfd60581bab3372d0bd717a932c19af5162d7b0a2
MD5 5849a1bf8ad1b9c53480cc40615bcb0f
SHA1 05bce2d9464393851b5e78f11c56b4a7036ae8c1
SHA512 c6cdf114352870131cf92d8744162f1064ed7c3500284f23379ca3dec3e96dfe98f9d911b173cc4a8af27980c610fcb76118233dfcb5695f559f840328c4a1d0
SSDEEP 12288:h4erXg8e/UZRW1KBBQ7qp5S30dWw2nHta:h4eyUZg87QGp5SXwuH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

7987

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA InterlockedDecrement GetComputerNameW GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW SetFileTime InitializeCriticalSection SwitchToFiber GetAtomNameW GetMailslotInfo CreateActCtxA SetConsoleTitleA LCMapStringA VerifyVersionInfoW GetStdHandle GetLongPathNameW GetProcAddress VirtualAlloc HeapSize PeekConsoleInputW GetLocaleInfoA CopyFileA EnterCriticalSection SetFileAttributesA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc DnsHostnameToComputerNameA GlobalGetAtomNameW GetModuleFileNameA GetDefaultCommConfigA LoadLibraryExA GetConsoleTitleW GetFileTime SetCalendarInfoA GetVersionExA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle LocalFree WriteProcessMemory EnumSystemLocalesW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetCommandLineA GetStartupInfoA GetModuleHandleW Sleep ExitProcess GetLastError WriteFile TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection VirtualFree HeapReAlloc HeapCreate SetHandleCount GetFileType SetFilePointer CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeW GetConsoleOutputCP WriteConsoleW CreateFileA

gdi32

GetCharWidthFloatA

winhttp

WinHttpCloseHandle

Sharing