193053008-060344[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
193053008-060344.exe
Size 1.2MB
Sample220309-nsaknabbfp
SHA256 032b470bea30ebbb1171b302b3fbcea932ef7602c475f14abd05ac789d9f0188
MD5 d7491fd9a607003cdfc87ab38e368937
SHA1 647983aca1c8fad341b6a91661c3f1cddbc2fc9a
SHA512 010e541e23049f652d3c5972b455d92d3ed572945df0f89e1f7914221c0057665084b7c3886cd4475f54984fde99951ae1a1ca6939e48a5be2140539a35251fc
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

193053008-060344.exe

.exe 1.2MB

193053008-060344.exe

IMPHASH e565b640556a2f3c5b5d74f39577630a
SHA256 032b470bea30ebbb1171b302b3fbcea932ef7602c475f14abd05ac789d9f0188
MD5 d7491fd9a607003cdfc87ab38e368937
SHA1 647983aca1c8fad341b6a91661c3f1cddbc2fc9a
SHA512 010e541e23049f652d3c5972b455d92d3ed572945df0f89e1f7914221c0057665084b7c3886cd4475f54984fde99951ae1a1ca6939e48a5be2140539a35251fc
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

5633

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesEx EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FlushViewOfFile FormatMessageA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleCP GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetExitCodeProcess GetFileAttributesW HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSetInformation HeapSize InitOnceExecuteOnce InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetPerformanceInfo K32GetProcessMemoryInfo GetProcAddress VirtualAlloc VirtualProtect Sleep GetModuleHandleA GetConsoleWindow GetSystemTimeAsFileTime QueryPerformanceCounter TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleW

user32

SetProcessDPIAware SetProcessWindowStation PostMessageW SendMessageTimeoutW ShowWindow MessageBoxA UnregisterClassW RegisterClassW GetMessageW GetProcessWindowStation GetThreadDesktop GetUserObjectInformationW GetWindowThreadProcessId IsWindow TranslateMessage

shell32

SHGetKnownFolderPath

ws2_32

select

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

vcruntime140

memset _except_handler4_common

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment exit _initterm_e _set_app_type _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s terminate _initterm _exit _get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale