94d08c64206e2e7b407f16fd7c62ee63[.]exe

General

Target
94d08c64206e2e7b407f16fd7c62ee63.exe
Size 445KB
Sample220517-qdr79sccb7
SHA256 ebc052ea936b31dbde5f38163c6ba2912227b90e285c036d1a910dfcae96524e
MD5 94d08c64206e2e7b407f16fd7c62ee63
SHA1 f9e9f1926d27cee6c6798fa58f973d2fb8e4e900
SHA512 cf91d66fcfb9684f8bfc65ac8656aa3dbfc0ff8dade38f7b0f939390f1188117f0ea0883151c9bbff1a06fe38a2e5de483bc5c17d94cb21841e963b1d771b1f0
SSDEEP 12288:o+gXwuuwbmFXe2XW4mEercE2ETIaF+wbrEBdS:oNgFkYO2XWhrc7aF+4E
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

94d08c64206e2e7b407f16fd7c62ee63.exe

.exe 445KB

94d08c64206e2e7b407f16fd7c62ee63.exe

IMPHASH b26b6a728780c4346ed1cd26977eb304
SHA256 ebc052ea936b31dbde5f38163c6ba2912227b90e285c036d1a910dfcae96524e
MD5 94d08c64206e2e7b407f16fd7c62ee63
SHA1 f9e9f1926d27cee6c6798fa58f973d2fb8e4e900
SHA512 cf91d66fcfb9684f8bfc65ac8656aa3dbfc0ff8dade38f7b0f939390f1188117f0ea0883151c9bbff1a06fe38a2e5de483bc5c17d94cb21841e963b1d771b1f0
SSDEEP 12288:o+gXwuuwbmFXe2XW4mEercE2ETIaF+wbrEBdS:oNgFkYO2XWhrc7aF+4E
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

72144

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SetPriorityClass SetThreadContext WriteConsoleInputW GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA SetDllDirectoryW InterlockedIncrement _lwrite VerSetConditionMask ReadConsoleA InterlockedDecrement GetCurrentActCtx GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetModuleHandleExW SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetLogicalDrives CallNamedPipeW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetPrivateProfileStringW ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx TerminateThread CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA WritePrivateProfileStructW GetConsoleAliasW GetWriteWatch GetBinaryTypeA TerminateProcess GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW SetComputerNameExW GetFileSize GetACP GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe GlobalUnfix ReleaseActCtx GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA WriteProfileSectionA CopyFileA SetComputerNameA DisableThreadLibraryCalls DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime GetAtomNameA LoadLibraryA WriteConsoleA ProcessIdToSessionId InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA GetExitCodeThread SetCurrentDirectoryW HeapLock Module32FirstW GetTapeParameters FoldStringA SetSystemTime GlobalWire FindNextFileA EnumDateFormatsA GetModuleHandleA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW GetStringTypeW GetConsoleTitleW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA CloseHandle DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW GetProfileSectionW GetOverlappedResult UnregisterWait Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter WideCharToMultiByte GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetCPInfo GetModuleHandleW GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW SetHandleCount QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetStringTypeA GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID InitializeCriticalSectionAndSpinCount SetFilePointer SetStdHandle GetConsoleOutputCP GetLocaleInfoW CreateFileA DeleteFileA

advapi32

ImpersonateNamedPipeClient

Sharing