e712dec65bd1bd4d6ca416a319ca231a[.]exe

General

Target
e712dec65bd1bd4d6ca416a319ca231a.exe
Size 1.2MB
Sample220309-pmq6wsbccq
SHA256 dcedf234c0f9d6fe3a4392693c82708c70c8e243f42f2e7073d35bd928f3b526
MD5 e712dec65bd1bd4d6ca416a319ca231a
SHA1 5681829d6b0d529c62609c15304286fd357410d7
SHA512 11528cce75c43e2c79160ca9bb8c9371972e40917bf3d7a1fbb17d800d9aa46e50d7df6709cadaa2c01434469d998e92dd8057d8dd0e7c56d65fac079dbf2d70
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

e712dec65bd1bd4d6ca416a319ca231a.exe

.exe 1.2MB

e712dec65bd1bd4d6ca416a319ca231a.exe

IMPHASH da87ed787b504389105de3ab7df646d4
SHA256 dcedf234c0f9d6fe3a4392693c82708c70c8e243f42f2e7073d35bd928f3b526
MD5 e712dec65bd1bd4d6ca416a319ca231a
SHA1 5681829d6b0d529c62609c15304286fd357410d7
SHA512 11528cce75c43e2c79160ca9bb8c9371972e40917bf3d7a1fbb17d800d9aa46e50d7df6709cadaa2c01434469d998e92dd8057d8dd0e7c56d65fac079dbf2d70
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

47568

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteProfileSectionA GetNumaHighestNodeNumber FindFirstVolumeA FlushConsoleInputBuffer HeapLock FindFirstChangeNotificationA PulseEvent GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesW EnumResourceNamesA FillConsoleOutputCharacterW GetTimeZoneInformation TerminateThread WaitForMultipleObjectsEx GetVersionExW VerifyVersionInfoW SetEvent FindNextFileA CopyFileExA BuildCommDCBAndTimeoutsA GetConsoleOutputCP GetCompressedFileSizeA ReadConsoleOutputCharacterA SetDefaultCommConfigA VerLanguageNameW _hread GetCommConfig WritePrivateProfileStructW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetWaitableTimer SetComputerNameExA FindAtomA LoadResource GetThreadTimes CallNamedPipeW BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA LocalAlloc VerifyVersionInfoA GlobalWire GetProfileSectionW GetCommandLineA InterlockedDecrement FindFirstChangeNotificationW CopyFileA ReleaseActCtx OutputDebugStringW FormatMessageA SetDllDirectoryW SetPriorityClass WritePrivateProfileStringA GetUserDefaultLangID GlobalFix GetVersionExA HeapValidate InterlockedCompareExchange GetStartupInfoW ConnectNamedPipe GetLastError GetCalendarInfoA GetComputerNameExW SetConsoleTextAttribute SetLastError CopyFileW GetCPInfoExW GetSystemWindowsDirectoryW GetSystemWow64DirectoryW GetPrivateProfileSectionNamesA ContinueDebugEvent InterlockedExchangeAdd GetOEMCP GetConsoleAliasW EnumResourceTypesA lstrlenA ReadConsoleA WriteConsoleA GetPrivateProfileSectionNamesW GetSystemTimeAsFileTime EnumCalendarInfoA SetThreadIdealProcessor EnumDateFormatsExW VerSetConditionMask CreateConsoleScreenBuffer GetProfileStringA CreateIoCompletionPort AllocConsole GetNumaNodeProcessorMask GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW EnumDateFormatsA GetCommState SetThreadContext CheckRemoteDebuggerPresent GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileW GetWriteWatch OpenSemaphoreW LoadLibraryW GetPrivateProfileStringW GetModuleHandleW DeleteAtom TlsFree GetProfileStringW CreateActCtxW CreateJobSet CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingW SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters PeekNamedPipe FillConsoleOutputCharacterA FindNextVolumeMountPointW InitAtomTable AddAtomW WriteConsoleOutputCharacterW GetConsoleAliasExesA GetBinaryTypeA SetThreadPriority InitializeCriticalSection DebugBreak LoadLibraryA UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress TerminateProcess GetCurrentProcess IsDebuggerPresent Sleep InterlockedIncrement ExitProcess GetModuleFileNameA WriteFile GetStdHandle SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle CloseHandle CreateFileA

gdi32

GetBitmapBits

Sharing