7faf3f5398541f39d4cf7664c6a4672a[.]exe

General

Target
7faf3f5398541f39d4cf7664c6a4672a.exe
Size 795KB
Sample220505-pp14waafdn
SHA256 f9335c2ce7dfc83aedb887c855654af5f5f9f7e5317fdfd50e5e60a11dcdbed7
MD5 7faf3f5398541f39d4cf7664c6a4672a
SHA1 e675eb4246217c22039b07332706001ced386c75
SHA512 71865aebed75da5825a643a38230958735cf9bc5b0379302edd8380a7a5fc0774a0c92a8844da34ea828521affdb9307f308fbca4966aff42e5747289fd9a9e5
SSDEEP 12288:MfqVrz4X2EExco7WHoJ+IGYhq6vX+C8bWjiJ4RguDv1rF8Z0DIiqASLTlD:tl5Ekco7J+sq6P+CkWLrD9LBZSLN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

7faf3f5398541f39d4cf7664c6a4672a.exe

.exe 795KB

7faf3f5398541f39d4cf7664c6a4672a.exe

IMPHASH 102925d1127f9c0032b267954e8e052b
SHA256 f9335c2ce7dfc83aedb887c855654af5f5f9f7e5317fdfd50e5e60a11dcdbed7
MD5 7faf3f5398541f39d4cf7664c6a4672a
SHA1 e675eb4246217c22039b07332706001ced386c75
SHA512 71865aebed75da5825a643a38230958735cf9bc5b0379302edd8380a7a5fc0774a0c92a8844da34ea828521affdb9307f308fbca4966aff42e5747289fd9a9e5
SSDEEP 12288:MfqVrz4X2EExco7WHoJ+IGYhq6vX+C8bWjiJ4RguDv1rF8Z0DIiqASLTlD:tl5Ekco7J+sq6P+CkWLrD9LBZSLN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

49696

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterW SetThreadAffinityMask GetExitCodeProcess GetCurrentProcessId GetVersionExA EnumDateFormatsExW FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsW DebugSetProcessKillOnExit WriteProfileStringW WritePrivateProfileStructA FindFirstChangeNotificationA MapViewOfFileEx CreateTimerQueue FindNextVolumeMountPointA SetVolumeMountPointW GetWriteWatch ReadConsoleInputA SetComputerNameExW SystemTimeToTzSpecificLocalTime GetSystemDirectoryA GetDriveTypeW BuildCommDCBAndTimeoutsA LoadLibraryA GlobalAlloc VerifyVersionInfoW GetBinaryTypeA ReleaseActCtx InterlockedExchangeAdd InterlockedDecrement FormatMessageW SetDllDirectoryA GetNamedPipeHandleStateA WritePrivateProfileStringA GetConsoleAliasesLengthW GetProcessHeaps OpenWaitableTimerW UnlockFile InterlockedIncrement GetStartupInfoW GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesW ContinueDebugEvent EndUpdateResourceA GetLastError GetSystemTime TerminateProcess FlushConsoleInputBuffer SetDefaultCommConfigW VirtualFree GlobalUnfix GetSystemWindowsDirectoryA CopyFileA TerminateThread EnterCriticalSection FindAtomA HeapUnlock GetMailslotInfo CreateActCtxA GetConsoleAliasW _lwrite CreateNamedPipeA InterlockedExchange SetSystemTimeAdjustment DefineDosDeviceW GetAtomNameA SetConsoleScreenBufferSize EnumResourceTypesA lstrlenA LoadLibraryW MoveFileA WriteConsoleA VirtualProtect GetModuleHandleW ReadConsoleOutputW GetThreadContext BuildCommDCBW AddRefActCtx WritePrivateProfileStringW GetFileAttributesW CopyFileW GetVolumePathNameW GetCommMask CloseHandle EnumDateFormatsExA FindActCtxSectionStringA GetNamedPipeInfo AttachConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasesW WriteConsoleInputW CreateMailslotW SetLocalTime EnumSystemLocalesA CallNamedPipeA GetConsoleAliasExesLengthW FindActCtxSectionStringW GetPrivateProfileIntW GetModuleHandleExW GetStringTypeA GetTickCount OpenWaitableTimerA GlobalWire FillConsoleOutputCharacterA GetCompressedFileSizeW SetThreadPriority MapUserPhysicalPages WriteConsoleOutputCharacterA EnumDateFormatsA TerminateJobObject CreateFileW GetDateFormatA GetOEMCP FindNextVolumeA Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind WideCharToMultiByte HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess IsDebuggerPresent GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetACP GetCPInfo IsValidCodePage SetStdHandle GetFileType WriteFile GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree GetModuleFileNameA HeapAlloc HeapSize HeapReAlloc VirtualAlloc FlushFileBuffers DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW GetConsoleOutputCP SetFilePointer CreateFileA ReadFile

advapi32

ImpersonateSelf

Sharing