ec76fddf34ff1519d986bce7efe9b0d1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ec76fddf34ff1519d986bce7efe9b0d1.exe
Size 1.5MB
Sample220421-md8cpsafam
SHA256 549d8f67e615fb4a17084e884f285947b9a4cd6c46bdd32d18bf44e71993fac4
MD5 ec76fddf34ff1519d986bce7efe9b0d1
SHA1 bea20cad0f44e61de43d0577913f8a432978738f
SHA512 f065737fff6197ef2771195e88ba22ec312dc02dce3ce06a70341140eb001dc04d784b572da8eb9208f2631e723c196b163c6769336536c3f72b173525265eb0
SSDEEP 12288:LPfO6+i+Qm2MTYsclY1GcnczAup6N1D4pa7+oUZV:LHOBclEBnczJZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ec76fddf34ff1519d986bce7efe9b0d1.exe

.exe 1.5MB

ec76fddf34ff1519d986bce7efe9b0d1.exe

IMPHASH d961b000b08ce2d6b3eff03f04bedd01
SHA256 549d8f67e615fb4a17084e884f285947b9a4cd6c46bdd32d18bf44e71993fac4
MD5 ec76fddf34ff1519d986bce7efe9b0d1
SHA1 bea20cad0f44e61de43d0577913f8a432978738f
SHA512 f065737fff6197ef2771195e88ba22ec312dc02dce3ce06a70341140eb001dc04d784b572da8eb9208f2631e723c196b163c6769336536c3f72b173525265eb0
SSDEEP 12288:LPfO6+i+Qm2MTYsclY1GcnczAup6N1D4pa7+oUZV:LHOBclEBnczJZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

52891

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SizeofResource lstrcmpiA FindResourceA WideCharToMultiByte IsDBCSLeadByte AcquireSRWLockExclusive AssignProcessToJobObject CompareStringW ConnectNamedPipe CreateDirectoryW EnumSystemLocalesEx EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW GetCommandLineW GetComputerNameExW GetStdHandle GetStringTypeW GetSystemDefaultLCID GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadLocale GetThreadPriority GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetUserDefaultLocaleName GetVersion GetVersionExW GetWindowsDirectoryW HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSetInformation HeapSize InitOnceExecuteOnce InitializeCriticalSection InitializeCriticalSectionAndSpinCount SetThreadPriority SetUnhandledExceptionFilter SignalObjectAndWait SleepConditionVariableSRW SleepEx TerminateJobObject TerminateProcess TlsAlloc TlsFree TlsGetValue LoadResource TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx VirtualQueryEx WaitForSingleObject WaitForSingleObjectEx WaitNamedPipeW WakeAllConditionVariable Wow64GetThreadContext WriteConsoleW WriteFile WriteProcessMemory lstrlenW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle OutputDebugStringA SetConsoleCtrlHandler SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose IsValidLocale CreateFileW GetLocaleInfoW LCMapStringW GetDateFormatW GetFileType GetCurrentThread GetACP GetModuleFileNameW GetModuleHandleExW VirtualQuery LoadLibraryExW InterlockedFlushSList RtlUnwind GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW GetStartupInfoW OutputDebugStringW IsDebuggerPresent VirtualFree LoadLibraryExA GetProcAddress GetModuleHandleA GetModuleFileNameA FreeLibrary VirtualProtect VirtualAlloc Sleep LeaveCriticalSection EnterCriticalSection SetLastError GetCommandLineA MultiByteToWideChar GetTickCount GetExitCodeThread GetCurrentThreadId CreateThread WaitForMultipleObjects DeleteCriticalSection InitializeCriticalSectionEx GetLastError RaiseException CloseHandle TlsSetValue DecodePointer IsProcessorFeaturePresent FlushInstructionCache GetCurrentProcess InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead GetProcessHeap EncodePointer

user32

EndDialog GetDlgItemInt SetDlgItemTextA UnregisterClassA GetWindowRect MessageBoxA MapWindowPoints GetWindowLongA SetWindowLongA GetClientRect SetWindowPos PostMessageW GetParent UnregisterClassW TranslateMessage SetProcessWindowStation SetProcessDPIAware SendMessageTimeoutW RegisterClassW CreateWindowExW IsWindow GetWindowThreadProcessId GetUserObjectInformationW GetThreadDesktop GetProcessWindowStation GetMessageW FindWindowExW DispatchMessageW DestroyWindow DefWindowProcW CreateWindowStationW CreateDesktopW GetActiveWindow CharNextA DialogBoxParamA GetMonitorInfoA MonitorFromWindow GetWindow

advapi32

SetKernelObjectSecurity SetEntriesInAclW RevertToSelf RegSetValueExW RegQueryValueExW RegOpenKeyExW RegDisablePredefinedCache RegDeleteValueW RegCreateKeyExW OpenProcessToken MapGenericMask LookupPrivilegeValueW IsValidSid InitializeSid ImpersonateNamedPipeClient ImpersonateLoggedOnUser RegSetValueExA RegQueryInfoKeyW RegOpenKeyExA RegEnumKeyExA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegCloseKey

shell32

CommandLineToArgvW SHGetFolderPathW

ole32

CoUninitialize CoTaskMemFree CoTaskMemRealloc CoCreateInstance CoTaskMemAlloc CoInitializeEx

oleaut32

SysAllocStringLen SysFreeString VarUI4FromStr VariantInit VariantClear SafeArrayDestroy

shlwapi

PathMatchSpecW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

winmm

timeGetTime