14b1f20f3ec1d9fa4a7f6eb9c2ae96e3[.]exe

General

Target
14b1f20f3ec1d9fa4a7f6eb9c2ae96e3.exe
Size 426KB
Sample220512-srwhyscggn
SHA256 8a9368e459952f9652f83bdbb2e834bc7227d2f22e7d07980ab489c1df3ea0a1
MD5 14b1f20f3ec1d9fa4a7f6eb9c2ae96e3
SHA1 48152d4d1f196723cb569fe9be272aea402edec3
SHA512 c9c0321302c4318b9ce6b9ac9be875fd6eba21414f223fde666ca7e25447e853346f2e7fc4ca569c5fd854cdd106c1395f6acd5c967134e58e14b849a8ed3385
SSDEEP 12288:9M8YU48NkzOQknLD2ngxW4qTRxZV+EhxMa:9ilQRDnLD2iW4qTfZ0EhP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

14b1f20f3ec1d9fa4a7f6eb9c2ae96e3.exe

.exe 426KB

14b1f20f3ec1d9fa4a7f6eb9c2ae96e3.exe

IMPHASH 8e2ab8a1912a9d8e58f338a0e4e577f1
SHA256 8a9368e459952f9652f83bdbb2e834bc7227d2f22e7d07980ab489c1df3ea0a1
MD5 14b1f20f3ec1d9fa4a7f6eb9c2ae96e3
SHA1 48152d4d1f196723cb569fe9be272aea402edec3
SHA512 c9c0321302c4318b9ce6b9ac9be875fd6eba21414f223fde666ca7e25447e853346f2e7fc4ca569c5fd854cdd106c1395f6acd5c967134e58e14b849a8ed3385
SSDEEP 12288:9M8YU48NkzOQknLD2ngxW4qTRxZV+EhxMa:9ilQRDnLD2iW4qTfZ0EhP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

66736

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetDefaultCommConfigA SetPriorityClass SetThreadContext GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetDriveTypeW DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA SetDllDirectoryW InterlockedIncrement _lwrite VerSetConditionMask MoveFileExW InterlockedDecrement GetCurrentActCtx GetSystemWindowsDirectoryW CreateJobObjectW GetNamedPipeHandleStateA GetModuleHandleExW SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetLogicalDrives CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters GetProcessPriorityBoost GetTickCount GetPrivateProfileStringW GetCompressedFileSizeW ReadConsoleOutputA GetDateFormatA FindActCtxSectionStringA GetCommandLineA CreateActCtxW EnumResourceTypesA GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx TerminateThread CopyFileW GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW GetSystemWindowsDirectoryA FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA WritePrivateProfileStructW FindNextVolumeW GetConsoleAliasW GetWriteWatch VerifyVersionInfoA GetBinaryTypeA TerminateProcess GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileA GetOverlappedResult GetACP GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe GlobalUnfix ReleaseActCtx GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA WriteProfileSectionA CopyFileA SetComputerNameA DisableThreadLibraryCalls DefineDosDeviceA ResetEvent _hwrite OpenWaitableTimerA GetLocalTime GetAtomNameA LoadLibraryA WriteConsoleA ProcessIdToSessionId InterlockedExchangeAdd LocalAlloc GetFileType WritePrivateProfileStringA MoveFileA GetExitCodeThread SetCurrentDirectoryW HeapLock FindAtomA FoldStringA SetSystemTime GlobalWire GetModuleHandleA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW FindNextFileW GetStringTypeW GetConsoleTitleW BuildCommDCBA VirtualProtect EnumDateFormatsW WaitForDebugEvent OutputDebugStringA SetCalendarInfoA SetThreadAffinityMask Module32NextW EndUpdateResourceA ReadConsoleInputW TerminateJobObject CloseHandle DeleteFileW GetCurrentProcessId GetProfileSectionW SetComputerNameExW UnregisterWait Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter WideCharToMultiByte GetCurrentProcess IsDebuggerPresent DeleteFileA GetModuleFileNameW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetCPInfo GetModuleHandleW GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError DebugBreak WriteConsoleW OutputDebugStringW LoadLibraryW SetHandleCount QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetStringTypeA GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID InitializeCriticalSectionAndSpinCount SetFilePointer SetStdHandle GetConsoleOutputCP GetLocaleInfoW

advapi32

ImpersonateNamedPipeClient

Sharing