b9a95d88a05064b88d912247e2a45ce8[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b9a95d88a05064b88d912247e2a45ce8.exe
Size 270KB
Sample220404-w1f2eaechn
SHA256 a8b4b389c495f249520ca634c9b0b3af1bf75ec54557d7e151c8416bb4a4d133
MD5 b9a95d88a05064b88d912247e2a45ce8
SHA1 b6cd4a9a36c4eba738622305a865fbf4e1b93a89
SHA512 ed037c5a83ccb31473dacae94d9db6869b59bad71385b5baf0aa207096cf4d07246641785a4c67cfe9e26e7c9ba778fb40a5316685547a19a329ed5f52b43781
SSDEEP 3072:kp1X8mKVAS/e5sJgeuyzQHJMcdwr31R8bLtio4wGQYvKSE6RFlxPM/h3Q2l:W8H3/eeJgeeWLrFR6tioFGtrR9G
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b9a95d88a05064b88d912247e2a45ce8.exe

.exe 270KB

b9a95d88a05064b88d912247e2a45ce8.exe

IMPHASH 7c9e068cec378fb57daaafa5b29927b3
SHA256 a8b4b389c495f249520ca634c9b0b3af1bf75ec54557d7e151c8416bb4a4d133
MD5 b9a95d88a05064b88d912247e2a45ce8
SHA1 b6cd4a9a36c4eba738622305a865fbf4e1b93a89
SHA512 ed037c5a83ccb31473dacae94d9db6869b59bad71385b5baf0aa207096cf4d07246641785a4c67cfe9e26e7c9ba778fb40a5316685547a19a329ed5f52b43781
SSDEEP 3072:kp1X8mKVAS/e5sJgeuyzQHJMcdwr31R8bLtio4wGQYvKSE6RFlxPM/h3Q2l:W8H3/eeJgeeWLrFR6tioFGtrR9G
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26944

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFlags GlobalAlloc LoadLibraryW InterlockedPopEntrySList LeaveCriticalSection WriteConsoleW GetMailslotInfo GetVolumePathNameA GetConsoleAliasesW FillConsoleOutputCharacterW GetLongPathNameW SetLastError SetStdHandle LoadLibraryA SetCalendarInfoW IsWow64Process MoveFileA WriteProfileSectionW GetModuleFileNameA GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCPInfoExA GetFileInformationByHandle CreateFileW HeapSize SetConsoleTextAttribute WriteConsoleOutputCharacterA GetConsoleAliasesLengthW FreeResource FlushFileBuffers GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EnterCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RaiseException RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW HeapReAlloc CloseHandle

user32

ClientToScreen

gdi32

GetTextExtentExPointA

advapi32

IsTokenRestricted ClearEventLogW

ole32

OleInitialize