f78794279b02108386a6e2b73ce2d438[.]exe

General

Target
f78794279b02108386a6e2b73ce2d438.exe
Size 390KB
Sample220524-dfk6hsgfbp
SHA256 bcd801ffcc3e97238eded74a880f756ad1ce240c8b4fb94ed2e830db58d0d414
MD5 f78794279b02108386a6e2b73ce2d438
SHA1 6412955ba0c0882e39c9b24070ba5588b1b014e8
SHA512 ef449948fc812536c5460fc59ddd3c0d4236a52111a71702b46f6cfe6a6cb562ee6794c5b37bc99cfff2d07b4ca0be42202fcb6a84c6721e287b699ebe7e40c8
SSDEEP 6144:ShCXgnYxBAIBG3oTN4k5b5+cfSXqtjciga3wVf:nXgnYxapYTNXKcftt9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f78794279b02108386a6e2b73ce2d438.exe

.exe 390KB

f78794279b02108386a6e2b73ce2d438.exe

IMPHASH 3781b95536515f5ce26a8458ec1fde0e
SHA256 bcd801ffcc3e97238eded74a880f756ad1ce240c8b4fb94ed2e830db58d0d414
MD5 f78794279b02108386a6e2b73ce2d438
SHA1 6412955ba0c0882e39c9b24070ba5588b1b014e8
SHA512 ef449948fc812536c5460fc59ddd3c0d4236a52111a71702b46f6cfe6a6cb562ee6794c5b37bc99cfff2d07b4ca0be42202fcb6a84c6721e287b699ebe7e40c8
SSDEEP 6144:ShCXgnYxBAIBG3oTN4k5b5+cfSXqtjciga3wVf:nXgnYxapYTNXKcftt9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27758

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement MoveFileExW OpenJobObjectA GetCurrentProcess SetDefaultCommConfigW EnumCalendarInfoExW GetConsoleAliasesLengthA GetUserDefaultLangID SetCommTimeouts GetEnvironmentStrings FindResourceExA GlobalAlloc GetConsoleMode GetAtomNameW GetGeoInfoA GetSystemDirectoryA GetBinaryTypeW GetShortPathNameA LCMapStringA FreeLibrary GetLastError SetLastError GetProcAddress FindClose LoadLibraryA GetProcessId RemoveDirectoryW GetDiskFreeSpaceA GetModuleHandleA OpenEventW CreateFileW RaiseException GetConsoleAliasesLengthW MultiByteToWideChar HeapAlloc EncodePointer DecodePointer HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess HeapFree IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection WideCharToMultiByte GetConsoleCP SetFilePointer LoadLibraryW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW RtlUnwind ReadFile WriteConsoleW SetStdHandle FlushFileBuffers CloseHandle

user32

ClientToScreen

advapi32

CreateRestrictedToken

Sharing