ef5ab0d2ffedf54fdf3e1a24542b6361[.]exe

General

Target
ef5ab0d2ffedf54fdf3e1a24542b6361.exe
Size 403KB
Sample220321-fejbmshchr
SHA256 2f7c261dd0a4f7f00b34b09fc1a35e729596a38bc80c6c54467de0dedb3c23db
MD5 ef5ab0d2ffedf54fdf3e1a24542b6361
SHA1 935e4e64357c5ad8e693c8e05fd8bd4928bf975f
SHA512 869dc31392387728e7b2748e3ea1d14cc80c351aed09c1a19e220046bd41c70123abc6756be4269fc0c082243b69542a8c6f09fc2b8b678cbbea02f8fbccd460
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

ef5ab0d2ffedf54fdf3e1a24542b6361.exe

.exe 403KB

ef5ab0d2ffedf54fdf3e1a24542b6361.exe

IMPHASH cbe2a3d9f5bb4fa7c1fbeb2b00df447c
SHA256 2f7c261dd0a4f7f00b34b09fc1a35e729596a38bc80c6c54467de0dedb3c23db
MD5 ef5ab0d2ffedf54fdf3e1a24542b6361
SHA1 935e4e64357c5ad8e693c8e05fd8bd4928bf975f
SHA512 869dc31392387728e7b2748e3ea1d14cc80c351aed09c1a19e220046bd41c70123abc6756be4269fc0c082243b69542a8c6f09fc2b8b678cbbea02f8fbccd460
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

43696

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW FileTimeToSystemTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterW GetTimeZoneInformation TerminateProcess SetLastError SetEvent FindNextFileA GetCompressedFileSizeW CopyFileExW BuildCommDCBAndTimeoutsW QueryDepthSList GetVersionExW VerifyVersionInfoW ReadConsoleOutputCharacterA SetDefaultCommConfigA VerLanguageNameA EscapeCommFunction WritePrivateProfileStructW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointW GetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomW GlobalDeleteAtom SetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryW GlobalAlloc InterlockedDecrement FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageA SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLangID GlobalUnfix GetStartupInfoW GetSystemWow64DirectoryW CopyFileA GetLastError DebugBreak SetConsoleCursorInfo SetCalendarInfoA SetConsoleScreenBufferSize ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW GetACP FindNextVolumeW CreateActCtxA GetConsoleAliasA OutputDebugStringW EnumResourceTypesA lstrlenA ReadConsoleW WriteConsoleW DeleteCriticalSection GlobalWire FreeEnvironmentStringsW ConvertFiberToThread lstrcatA EnumCalendarInfoA SetThreadAffinityMask LockFile RaiseException VerSetConditionMask GetConsoleCP GetProfileStringA CreateIoCompletionPort AllocConsole GlobalGetAtomNameA SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW GetCommState MoveFileWithProgressA GetSystemTimeAdjustment _hread _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileA ResetWriteWatch EnumDateFormatsW DeleteAtom GetSystemWindowsDirectoryA GetComputerNameW GetConsoleAliasesLengthA FindFirstVolumeW CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW GetProcessShutdownParameters FindNextVolumeMountPointA WriteConsoleOutputCharacterA GetNumberFormatA GetConsoleAliasExesA GetBinaryTypeA GetCurrentActCtx WriteProfileSectionA SetLocaleInfoA GetPrivateProfileStringW LoadLibraryA GetModuleHandleW Sleep InterlockedIncrement GetProcAddress ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleFileNameA WriteFile GetStdHandle GetOEMCP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharToOemBuffA

gdi32

GetCharWidth32A

advapi32

ImpersonateSelf

Sharing