5b92d1d8c1df0cc42591bc05cb62331a28f54e3566c708a8fd13b00cb76881c2[.]exe

General

Target
5b92d1d8c1df0cc42591bc05cb62331a28f54e3566c708a8fd13b00cb76881c2.exe
Size 382KB
Sample220522-jmzkdacfgj
SHA256 5b92d1d8c1df0cc42591bc05cb62331a28f54e3566c708a8fd13b00cb76881c2
MD5 38b5deb16f9cd877a6a7ca7c7434b5ea
SHA1 11051c4a389238fe7e2202cb506a6f23cfa6bfa4
SHA512 f1f75b2f2641e09c1ce71b7d442b30169b6335d2e15a6fc9bfcb94ffa6552d4f8783cd6468016789d249e2633332e705631e06ad9ede80c03f87e4a051aee899
SSDEEP 6144:fEIgOuHyMWtqjWI3HB4kb6yWy4VC6PzDdS9CPxUFu4fwFupfDeoXC:fEItQWYiIXB4kb6PCYE26fv
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5b92d1d8c1df0cc42591bc05cb62331a28f54e3566c708a8fd13b00cb76881c2.exe

.exe 382KB

5b92d1d8c1df0cc42591bc05cb62331a28f54e3566c708a8fd13b00cb76881c2.exe

IMPHASH 0328a7958ec44d4b27f5ea8928c8e8f5
SHA256 5b92d1d8c1df0cc42591bc05cb62331a28f54e3566c708a8fd13b00cb76881c2
MD5 38b5deb16f9cd877a6a7ca7c7434b5ea
SHA1 11051c4a389238fe7e2202cb506a6f23cfa6bfa4
SHA512 f1f75b2f2641e09c1ce71b7d442b30169b6335d2e15a6fc9bfcb94ffa6552d4f8783cd6468016789d249e2633332e705631e06ad9ede80c03f87e4a051aee899
SSDEEP 6144:fEIgOuHyMWtqjWI3HB4kb6yWy4VC6PzDdS9CPxUFu4fwFupfDeoXC:fEItQWYiIXB4kb6PCYE26fv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

70768

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA SetPriorityClass SetThreadContext GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetDriveTypeW MoveFileExA DebugActiveProcessStop lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA SetDllDirectoryW InterlockedIncrement _lwrite VerSetConditionMask ReadConsoleA InterlockedDecrement GetCurrentActCtx GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetModuleHandleExW SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW GetLogicalDrives CallNamedPipeW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetPrivateProfileStringW ReadConsoleOutputA GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA GetPrivateProfileIntA GetSystemDirectoryW AddRefActCtx TerminateThread CopyFileW AssignProcessToJobObject GetCalendarInfoA ReadProcessMemory GetSystemWow64DirectoryW FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA WritePrivateProfileStructW GetConsoleAliasW GetWriteWatch GetBinaryTypeA TerminateProcess GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW SetComputerNameExW GetOverlappedResult GetFileSize GetVolumePathNameA lstrlenW FindNextVolumeMountPointW CreateMailslotW DisconnectNamedPipe GlobalUnfix ReleaseActCtx GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA WriteProfileSectionA CopyFileA SetComputerNameA DisableThreadLibraryCalls DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime GetAtomNameA LoadLibraryA WriteConsoleA ProcessIdToSessionId InterlockedExchangeAdd LocalAlloc SetCalendarInfoW WritePrivateProfileStringA MoveFileA GetExitCodeThread SetCurrentDirectoryW HeapLock Module32FirstW GetTapeParameters FoldStringA SetSystemTime GlobalWire FindNextFileA GetModuleHandleA FindFirstChangeNotificationA CreateWaitableTimerW lstrcatW GetStringTypeW GetConsoleTitleW BuildCommDCBA VirtualProtect EnumDateFormatsW OutputDebugStringA SetThreadAffinityMask EndUpdateResourceA ReadConsoleInputW CloseHandle DeleteFileW GetCurrentProcessId DebugBreak FindActCtxSectionStringW GetProfileSectionW GetACP UnregisterWait Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter WideCharToMultiByte GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetCPInfo GetModuleHandleW GetProcAddress ExitProcess GetModuleFileNameA WriteFile GetStdHandle GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW SetHandleCount QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetStringTypeA GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID InitializeCriticalSectionAndSpinCount SetFilePointer SetStdHandle GetConsoleOutputCP GetLocaleInfoW CreateFileA DeleteFileA

advapi32

ImpersonateNamedPipeClient

Sharing