8a54239a1198381d7ee58ec079daa9bf[.]exe

General

Target
8a54239a1198381d7ee58ec079daa9bf.exe
Size 347KB
Sample220515-ry481aehg7
SHA256 23d8c293f8e11955f68c28f40c795e59ab7e7d0c5b5e5c19aed8309c2596e5a9
MD5 8a54239a1198381d7ee58ec079daa9bf
SHA1 2186416a26161220603ab0f6f04e7905b9e49af1
SHA512 f9cbaaba73858b9be37e631ab156cd573e0ea414c121546ca5788d9086af32964a137c4844fd64ace5939b319586e084086b9a361d69cfbe431fd980a15cc493
SSDEEP 6144:BCJG6akDYLa3zYKvttpJ079/50Y10YhqAHVHU+uA:BCJG6akDKkhiBRPqAHVHUK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

8a54239a1198381d7ee58ec079daa9bf.exe

.exe 347KB

8a54239a1198381d7ee58ec079daa9bf.exe

IMPHASH 02c769aa1c4d2ec165e224494a424a20
SHA256 23d8c293f8e11955f68c28f40c795e59ab7e7d0c5b5e5c19aed8309c2596e5a9
MD5 8a54239a1198381d7ee58ec079daa9bf
SHA1 2186416a26161220603ab0f6f04e7905b9e49af1
SHA512 f9cbaaba73858b9be37e631ab156cd573e0ea414c121546ca5788d9086af32964a137c4844fd64ace5939b319586e084086b9a361d69cfbe431fd980a15cc493
SSDEEP 6144:BCJG6akDYLa3zYKvttpJ079/50Y10YhqAHVHU+uA:BCJG6akDKkhiBRPqAHVHUK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25122

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExW OpenJobObjectA GetCurrentProcess EnumCalendarInfoExW GetConsoleAliasesLengthA GetGeoInfoW GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc LoadLibraryW SetConsoleMode GetModuleFileNameW GetSystemDirectoryA GetBinaryTypeW lstrcmpW InterlockedIncrement GetLastError GetProcAddress GetDiskFreeSpaceW GetAtomNameA LoadLibraryA LocalAlloc CreateEventW GetCommTimeouts GetCurrentProcessId FindResourceA FreeLibrary LCMapStringA SetDefaultCommConfigA MultiByteToWideChar EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection Sleep HeapSize WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringW GetStringTypeW HeapFree RtlUnwind HeapAlloc HeapReAlloc WriteConsoleW SetStdHandle FlushFileBuffers RaiseException CreateFileW CloseHandle

gdi32

GetCharWidthFloatA

advapi32

ImpersonateAnonymousToken

Name

.text

Size

236KB

Virtual Size

236KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

39.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hahozi

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.feh

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vut

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8a54239a1198381d7ee58ec079daa9bf.exe

kernel32

gdi32

advapi32