2fa5c38daaf2ec2c8311605d52ec525b[.]exe

General

Target
2fa5c38daaf2ec2c8311605d52ec525b.exe
Size 357KB
Sample220325-ykvkzaggen
SHA256 56586bda88e32be6a2ae5ba59a06127dc382ca0d5619dfdfe0dd0353ee4877ab
MD5 2fa5c38daaf2ec2c8311605d52ec525b
SHA1 16dc9d53e49f2779df85c17efe93dfd4672b01b3
SHA512 5bcc42ce9b5c397b922000e1508f8d3f77193b5876b23e33b4960eeac0cd42105ef29958b45fb33e532ff226352eee87795b2cdbb6eb4b069a206d8638c1d1e0
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

2fa5c38daaf2ec2c8311605d52ec525b.exe

.exe 357KB

2fa5c38daaf2ec2c8311605d52ec525b.exe

IMPHASH 2b0cb1de227ee27eff54e94dd3b1cea8
SHA256 56586bda88e32be6a2ae5ba59a06127dc382ca0d5619dfdfe0dd0353ee4877ab
MD5 2fa5c38daaf2ec2c8311605d52ec525b
SHA1 16dc9d53e49f2779df85c17efe93dfd4672b01b3
SHA512 5bcc42ce9b5c397b922000e1508f8d3f77193b5876b23e33b4960eeac0cd42105ef29958b45fb33e532ff226352eee87795b2cdbb6eb4b069a206d8638c1d1e0
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

43728

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CreateMutexW SetLocaleInfoW FindNextVolumeW GetNamedPipeHandleStateA LocalFileTimeToFileTime EnumResourceTypesW EnumResourceNamesA FillConsoleOutputCharacterA CreateTimerQueueTimer TerminateProcess SetLastError SetEvent FindNextFileW GetCompressedFileSizeA CopyFileExW BuildCommDCBA VerifyVersionInfoW FreeResource GetVersionExA ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameW GetCommConfig WritePrivateProfileStructA LocalFree DeleteTimerQueueTimer FindNextVolumeMountPointA GetWriteWatch WriteConsoleInputW LoadResource AddAtomW GlobalDeleteAtom GetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect GlobalAlloc GetVersionExW GlobalFix FindFirstChangeNotificationW VerifyVersionInfoA SearchPathW FormatMessageW SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLCID TerminateThread GlobalUnfix SetConsoleWindowInfo InterlockedDecrement GetStartupInfoA GetSystemWow64DirectoryW CopyFileA GetPrivateProfileIntA SetCalendarInfoW DebugBreak SetConsoleCursorInfo FreeLibraryAndExitThread GetModuleFileNameA SetConsoleScreenBufferSize WaitForDebugEvent InterlockedExchangeAdd GetOEMCP GetPrivateProfileStringW CreateActCtxW ReadConsoleInputW OutputDebugStringW PulseEvent SetThreadAffinityMask FlushConsoleInputBuffer lstrlenA LoadLibraryW WriteConsoleW GetThreadContext FreeEnvironmentStringsA TryEnterCriticalSection QueryDepthSList ConvertFiberToThread SetProcessPriorityBoost LockFile FreeEnvironmentStringsW GetConsoleCP CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthA CreateMailslotW GetCommState MoveFileWithProgressA GetPrivateProfileIntW GetSystemTimeAdjustment EnumSystemLocalesW OpenMutexA GetLastError WriteProfileStringA OpenWaitableTimerW OpenFileMappingW GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterW WriteConsoleOutputCharacterA GetDateFormatW GetConsoleAliasExesA GetBinaryTypeW BuildCommDCBAndTimeoutsW Sleep InterlockedIncrement GetProcAddress ExitProcess MoveFileA DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree WriteFile GetStdHandle GetACP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharUpperW

Sharing