2f79b70458c2dc473d74107f577f0100[.]exe

General

Target
2f79b70458c2dc473d74107f577f0100.exe
Size 407KB
Sample220321-mbc4sabeem
SHA256 a426c2090b8c2777661236aa54ce8eb143af9cc4c1aa8aa11261c6758a970921
MD5 2f79b70458c2dc473d74107f577f0100
SHA1 e32c8f0bce272996d95fdae57c1ea74b0a48fd12
SHA512 5960197234f339fef0a01a123ab38b83efbd15511b35cfb61de0edd7c5ce2a42465482f7bd3d42f94b5e6fb05c613e9c47a2d17ffcad62d7e9ce06d65961711a
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

2f79b70458c2dc473d74107f577f0100.exe

.exe 407KB

2f79b70458c2dc473d74107f577f0100.exe

IMPHASH 30c85236402d607ec86afd7c1aadbde2
SHA256 a426c2090b8c2777661236aa54ce8eb143af9cc4c1aa8aa11261c6758a970921
MD5 2f79b70458c2dc473d74107f577f0100
SHA1 e32c8f0bce272996d95fdae57c1ea74b0a48fd12
SHA512 5960197234f339fef0a01a123ab38b83efbd15511b35cfb61de0edd7c5ce2a42465482f7bd3d42f94b5e6fb05c613e9c47a2d17ffcad62d7e9ce06d65961711a
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

43696

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW FileTimeToSystemTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterW GetTimeZoneInformation TerminateProcess SetLastError SetEvent FindNextFileA GetCompressedFileSizeW CopyFileExW BuildCommDCBAndTimeoutsW QueryDepthSList GetVersionExW VerifyVersionInfoW ReadConsoleOutputCharacterA SetDefaultCommConfigA VerLanguageNameA EscapeCommFunction WritePrivateProfileStructW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointW GetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomW GlobalDeleteAtom SetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect LoadLibraryW GlobalAlloc InterlockedExchange FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageA SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLangID GlobalUnfix GetStartupInfoW GetSystemWow64DirectoryW CopyFileA GetLastError DebugBreak SetConsoleCursorInfo SetCalendarInfoW SetConsoleScreenBufferSize ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW GetACP FindNextVolumeW CreateActCtxA GetConsoleAliasA OutputDebugStringW EnumResourceTypesA lstrlenA ReadConsoleW WriteConsoleW DeleteCriticalSection GlobalWire FreeEnvironmentStringsW ConvertFiberToThread lstrcatA EnumCalendarInfoA SetThreadAffinityMask LockFile RaiseException VerSetConditionMask GetConsoleCP GetProfileStringA CreateIoCompletionPort AllocConsole GlobalGetAtomNameA SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW GetCommState MoveFileWithProgressA GetSystemTimeAdjustment _hread _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileA ResetWriteWatch EnumDateFormatsW DeleteAtom GetSystemWindowsDirectoryA GetComputerNameA GetConsoleAliasesLengthA FindFirstVolumeW CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW GetProcessShutdownParameters FindNextVolumeMountPointA WriteConsoleOutputCharacterA GetNumberFormatA GetConsoleAliasExesA GetBinaryTypeA GetCurrentActCtx WriteProfileSectionA SetLocaleInfoA GetPrivateProfileStringW LoadLibraryA GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement GetProcAddress ExitProcess DeleteFileA GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleFileNameA WriteFile GetStdHandle GetOEMCP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharToOemBuffA

gdi32

GetCharWidth32A

advapi32

ImpersonateSelf

Sharing