244A9C5318E98599C60F3DACBFF48F4F0A898CCDA29AD[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
244A9C5318E98599C60F3DACBFF48F4F0A898CCDA29AD.exe
Size 184KB
Sample220427-bncs1afad6
SHA256 244a9c5318e98599c60f3dacbff48f4f0a898ccda29ad8a6a8625e3cfe0dbc22
MD5 0a56a968a7f1c3d265acf38740a93d38
SHA1 bf17dcba21603a6681f0f9bbec81d356e33d9029
SHA512 81d90036885ec7389f146bef660a8553a76179972ddffa5e001f74104165166cf0aad2355db6c80575b26c7b5012aea973470f02913ba128c28e71449f03919f
SSDEEP 3072:mtABk6Wgo4Ct6PrJA6Mnbqm18kTwvG+mmYJ+vknnI+:GABk6Wx483bqmCs+v4nI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

244A9C5318E98599C60F3DACBFF48F4F0A898CCDA29AD.exe

.exe 184KB

244A9C5318E98599C60F3DACBFF48F4F0A898CCDA29AD.exe

IMPHASH 07cd32fe06d43febfbbba5706c9ac01e
SHA256 244a9c5318e98599c60f3dacbff48f4f0a898ccda29ad8a6a8625e3cfe0dbc22
MD5 0a56a968a7f1c3d265acf38740a93d38
SHA1 bf17dcba21603a6681f0f9bbec81d356e33d9029
SHA512 81d90036885ec7389f146bef660a8553a76179972ddffa5e001f74104165166cf0aad2355db6c80575b26c7b5012aea973470f02913ba128c28e71449f03919f
SSDEEP 3072:mtABk6Wgo4Ct6PrJA6Mnbqm18kTwvG+mmYJ+vknnI+:GABk6Wx483bqmCs+v4nI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13870

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_controlfp _strlwr _strnicmp _itoa __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ strstr strncpy _CxxThrowException __CxxFrameHandler strcmp ??3@YAXPAX@Z memcpy ??2@YAPAXI@Z memset strchr strncat strcat tolower toupper _ftol srand rand strcpy _except_handler3 strlen _stricmp

kernel32

GetStartupInfoA MultiByteToWideChar GetLastError CreateDirectoryA GetFileAttributesA lstrcpyA lstrlenA DeleteFileA SetFileAttributesA CloseHandle Process32Next GetCurrentProcessId Process32First CreateToolhelp32Snapshot GetTickCount lstrcatA GetSystemDirectoryA HeapFree GetProcAddress GetModuleHandleA HeapAlloc GetProcessHeap ExitProcess SetEnvironmentVariableA GetWindowsDirectoryA GetTempPathA MoveFileA SetFileTime WideCharToMultiByte SystemTimeToFileTime SetFilePointer WriteFile CreateFileA lstrcmpiA GetModuleFileNameA Sleep WaitForSingleObject CreateEventA OpenEventA SetUnhandledExceptionFilter GetCommandLineA LocalFileTimeToFileTime

user32

wsprintfA

advapi32

GetUserNameA GetServiceKeyNameA StartServiceA ControlService OpenSCManagerA CreateServiceA DeleteService CloseServiceHandle RegCreateKeyExA RegSetValueExA RegDeleteKeyA RegDeleteValueA RegQueryValueExA RegEnumKeyExA RegEnumValueA RegOpenKeyExA RegCloseKey LookupAccountNameA GetFileSecurityA InitializeSecurityDescriptor GetSecurityDescriptorDacl GetAclInformation GetLengthSid InitializeAcl GetAce EqualSid AddAce AddAccessAllowedAce SetSecurityDescriptorDacl GetSecurityDescriptorControl SetFileSecurityA

shlwapi

SHDeleteKeyA

netapi32

NetApiBufferFree NetUserGetLocalGroups