f7aec941a965dbe761ea1e9a939c3efe[.]exe

General

Target
f7aec941a965dbe761ea1e9a939c3efe.exe
Size 552KB
Sample220311-1dl2csbdd6
SHA256 2c709cff5a598470d744d9e5ef8abcaadaa6e79df04c138b05e4d4bdafbeabc8
MD5 f7aec941a965dbe761ea1e9a939c3efe
SHA1 963c59f5db3eb7746baacd16448382ad01504a7c
SHA512 0e673a3b8550d227c7fb59eb94d770cb5378def93101a6a9bb2004d8eed3bfae0571ee3a730219e700c10fbe3db082ffb4ede89d640cef0706e61452d4b5eff5
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

f7aec941a965dbe761ea1e9a939c3efe.exe

.exe 552KB

f7aec941a965dbe761ea1e9a939c3efe.exe

IMPHASH 406de4076009c796cb18d0fd9ae9b583
SHA256 2c709cff5a598470d744d9e5ef8abcaadaa6e79df04c138b05e4d4bdafbeabc8
MD5 f7aec941a965dbe761ea1e9a939c3efe
SHA1 963c59f5db3eb7746baacd16448382ad01504a7c
SHA512 0e673a3b8550d227c7fb59eb94d770cb5378def93101a6a9bb2004d8eed3bfae0571ee3a730219e700c10fbe3db082ffb4ede89d640cef0706e61452d4b5eff5
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

51392

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteProfileSectionA SetLocaleInfoW FindFirstVolumeA GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterA GetTimeZoneInformation TerminateThread SetLastError GetVersionExW VerifyVersionInfoA QueryDepthSList SetEvent FindNextFileW BuildCommDCBAndTimeoutsA GetCompressedFileSizeA CopyFileExW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructA FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomW LoadResource GetThreadPriority CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsW VirtualProtect LocalAlloc GetProfileSectionA GetCommandLineA InterlockedExchange FindFirstChangeNotificationW GetCalendarInfoA ReleaseActCtx FindResourceA FormatMessageA SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLangID TerminateProcess GlobalFix HeapValidate InterlockedCompareExchange GetStartupInfoW SetCalendarInfoW DebugBreak SetConsoleTextAttribute GetLastError CopyFileA DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW GetComputerNameExW ContinueDebugEvent InterlockedExchangeAdd GetACP GetPrivateProfileStringA CreateActCtxA GetConsoleAliasW OutputDebugStringW lstrlenA WriteConsoleA GetPrivateProfileSectionNamesA GlobalWire FormatMessageW lstrcatA EnumCalendarInfoA SetThreadAffinityMask VerSetConditionMask CreateConsoleScreenBuffer GetSystemWindowsDirectoryA GetProfileStringW GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW GetCommState SetThreadContext GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthW MoveFileA GetWriteWatch GetPrivateProfileStringW GetModuleHandleA DeleteAtom LoadLibraryW EnumDateFormatsA WriteConsoleOutputCharacterA TlsFree SetFirmwareEnvironmentVariableW GetProfileSectionW CommConfigDialogW GetConsoleAliasesLengthA CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerW OpenFileMappingW SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FindNextVolumeMountPointW SetThreadPriority ReadConsoleW WriteConsoleOutputCharacterW GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA EnterCriticalSection InitializeCriticalSection SetConsoleCursorPosition LoadLibraryA DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep InterlockedIncrement InterlockedDecrement ExitProcess TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId SetHandleCount GetStdHandle GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

gdi32

GetBoundsRect

winhttp

WinHttpConnect

msimg32

AlphaBlend

Sharing