e2dac90f4afdfd5be54e38ce393fa2a3[.]exe

General

Target
e2dac90f4afdfd5be54e38ce393fa2a3.exe
Size 366KB
Sample220510-pl8dsabegr
SHA256 94e18172c26f6fb1862df5cdc0924febf6d2cba62b863e8f13d5eb7139d3280c
MD5 e2dac90f4afdfd5be54e38ce393fa2a3
SHA1 52a95c36109ed9260f629a869e3f7233c7558497
SHA512 c4dc9d2339f3c6ce01cd3f6c61d4dd8828e3e5ab95f26066ef526a51428adf12d78b587b4373274b2dbf3c6b7884ee8bfb879d458ea867b1e4edce0f42eab52e
SSDEEP 6144:4U4OQMwbCLzn0r6D+1dKnPGFta8kQpwZBei25HbfR+Ey1xSmL0d9djYw/PQBXho:3bsbswuD+1dKnPG68kXDk581g9djYKIX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e2dac90f4afdfd5be54e38ce393fa2a3.exe

.exe 366KB

e2dac90f4afdfd5be54e38ce393fa2a3.exe

IMPHASH 03d741c0997afad4183375be70028b61
SHA256 94e18172c26f6fb1862df5cdc0924febf6d2cba62b863e8f13d5eb7139d3280c
MD5 e2dac90f4afdfd5be54e38ce393fa2a3
SHA1 52a95c36109ed9260f629a869e3f7233c7558497
SHA512 c4dc9d2339f3c6ce01cd3f6c61d4dd8828e3e5ab95f26066ef526a51428adf12d78b587b4373274b2dbf3c6b7884ee8bfb879d458ea867b1e4edce0f42eab52e
SSDEEP 6144:4U4OQMwbCLzn0r6D+1dKnPGFta8kQpwZBei25HbfR+Ey1xSmL0d9djYw/PQBXho:3bsbswuD+1dKnPG68kXDk581g9djYKIX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41424

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA GetFileSize SetDefaultCommConfigA SetPriorityClass WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetStringTypeA GetDriveTypeW DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA SetDllDirectoryW EndUpdateResourceW InterlockedIncrement _lwrite VerSetConditionMask MoveFileExW GetConsoleAliasA InterlockedDecrement GetCurrentActCtx GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetModuleHandleExW SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetLogicalDrives CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters GetTickCount GetConsoleTitleA GetCompressedFileSizeW ReadConsoleOutputA GetDateFormatA FindActCtxSectionStringA CreateActCtxW EnumResourceTypesA GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx TerminateThread ReadProcessMemory GetSystemWow64DirectoryW GetSystemWindowsDirectoryA FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetWriteWatch GetFileAttributesW VerifyVersionInfoA GetBinaryTypeA TerminateProcess GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation SetComputerNameExW GetOverlappedResult UnregisterWait GetVolumePathNameA lstrlenW FindNextVolumeMountPointW SetThreadPriority CreateMailslotW DisconnectNamedPipe GlobalUnfix ReleaseActCtx GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetLastError CreateNamedPipeA EnumDateFormatsExA HeapUnlock WriteProfileSectionA CopyFileA SetComputerNameA EnterCriticalSection GlobalGetAtomNameA DisableThreadLibraryCalls BuildCommDCBW DefineDosDeviceA ResetEvent _hwrite OpenWaitableTimerA GetLocalTime GetAtomNameA LoadLibraryA WriteConsoleA ProcessIdToSessionId RegisterWaitForSingleObject LocalAlloc GetFileType WritePrivateProfileStringA MoveFileA SetCurrentDirectoryW FindAtomA SetSystemTime GlobalWire GetModuleHandleA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW FindNextFileW GetStringTypeW RequestWakeupLatency VirtualProtect EnumDateFormatsW WaitForDebugEvent OutputDebugStringA SetCalendarInfoA SetThreadAffinityMask SetProcessShutdownParameters Module32NextW GetVersionExA ReadConsoleInputW TerminateJobObject CloseHandle GetCurrentProcessId GetConsoleProcessList FindNextVolumeA GetACP GetThreadContext Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection WideCharToMultiByte GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteFileA MultiByteToWideChar GetModuleFileNameW GetCommandLineA HeapValidate IsBadReadPtr RaiseException RtlUnwind SetStdHandle WriteFile GetConsoleCP GetConsoleMode GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError DebugBreak GetStdHandle WriteConsoleW OutputDebugStringW ExitProcess LoadLibraryW QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount GetConsoleOutputCP SetFilePointer LCMapStringA LCMapStringW GetLocaleInfoA

advapi32

ImpersonateSelf

Sharing