1f1cf8e13e23095faeae4103945dcc44[.]exe

General

Target
1f1cf8e13e23095faeae4103945dcc44.exe
Size 449KB
Sample220311-rpkg8shgf7
SHA256 8a0d9d08b498d4ab62e2d89c13835fdbcc31bf3d3c4f55a6513afb320be25c10
MD5 1f1cf8e13e23095faeae4103945dcc44
SHA1 bf568048d9f8367e7535298236b81df0297b4e66
SHA512 6ccb6725a96f27c83b50dc4c7016a98f66b33eae78a71ff7470bc0ef8cb78a7cc95271f26e1282db0ebb77627a2c8a25a56d83b66a6c172d21d6561e3bfd361b
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

1f1cf8e13e23095faeae4103945dcc44.exe

.exe 449KB

1f1cf8e13e23095faeae4103945dcc44.exe

IMPHASH 5f946d692b9af0e7c99e0dbbc04fd013
SHA256 8a0d9d08b498d4ab62e2d89c13835fdbcc31bf3d3c4f55a6513afb320be25c10
MD5 1f1cf8e13e23095faeae4103945dcc44
SHA1 bf568048d9f8367e7535298236b81df0297b4e66
SHA512 6ccb6725a96f27c83b50dc4c7016a98f66b33eae78a71ff7470bc0ef8cb78a7cc95271f26e1282db0ebb77627a2c8a25a56d83b66a6c172d21d6561e3bfd361b
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

50720

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteProfileSectionA SetLocaleInfoA FindFirstVolumeA GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterW GetTimeZoneInformation TerminateThread SignalObjectAndWait GetVersionExW VerifyVersionInfoA QueryDepthSList SetEvent FindNextFileA BuildCommDCBAndTimeoutsA GetCompressedFileSizeA CopyFileExW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructA FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomA LoadResource GetThreadPriority CallNamedPipeW BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA LocalAlloc GlobalUnfix GetProfileSectionA GetCommandLineA InterlockedExchange FindFirstChangeNotificationW GetCalendarInfoA ReleaseActCtx OutputDebugStringW FormatMessageA SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLangID TerminateProcess GlobalFix GetVersionExA HeapValidate InterlockedCompareExchange CopyFileA GetLastError SetCalendarInfoW DebugBreak SetConsoleTextAttribute SetLastError GetSystemWow64DirectoryW GetStartupInfoW GetComputerNameExW GetCPInfoExW ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW GetACP GetPrivateProfileStringA CreateActCtxA GetConsoleAliasW OutputDebugStringA lstrlenA WriteConsoleA GlobalWire FormatMessageW GetPrivateProfileSectionNamesW GetSystemTimeAsFileTime EnumCalendarInfoA SetThreadAffinityMask VerSetConditionMask CreateConsoleScreenBuffer GetSystemWindowsDirectoryA GetProfileStringW CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW GetCommState SetThreadContext GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthW MoveFileA GetWriteWatch GetPrivateProfileStringW EnumDateFormatsA DeleteAtom LoadLibraryW TlsFree SetFirmwareEnvironmentVariableW CommConfigDialogW GetConsoleAliasesLengthA CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterA FindNextVolumeMountPointW SetThreadPriority ReadConsoleW AddAtomA WriteConsoleOutputCharacterW GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA EnterCriticalSection InitializeCriticalSection DisconnectNamedPipe LoadLibraryA DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep InterlockedIncrement InterlockedDecrement ExitProcess TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId SetHandleCount GetStdHandle GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleW GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

gdi32

GetBoundsRect

winhttp

WinHttpConnect

msimg32

AlphaBlend

Sharing