f3973e4b7ac78446c3359ce145cf3bf7[.]exe

General

Target
f3973e4b7ac78446c3359ce145cf3bf7.exe
Size 378KB
Sample220525-e234wscber
SHA256 75080ef2f41e2c39eb552b9a3d20705291e0264d8bde72ec9333f7d0b304131b
MD5 f3973e4b7ac78446c3359ce145cf3bf7
SHA1 46e559705a443fd9e77d34b1aa481a9b4ae81b9b
SHA512 85b0431d94fb0a17346690a2b70168c420af0fe779509eb17083b6f399aae36661734472261422b065589ddde32956b4d8fe799298d42461d75436425b05bc62
SSDEEP 6144:ZvDTCoisoyaoKLPVT25njUNN6Q4EIReZEyBsUwoKKzCDkB:Z7ZiLpo8PV6pUNZbIRSEyBsU
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f3973e4b7ac78446c3359ce145cf3bf7.exe

.exe 378KB

f3973e4b7ac78446c3359ce145cf3bf7.exe

IMPHASH e14222a66bfe02a8db7cc13088bb5042
SHA256 75080ef2f41e2c39eb552b9a3d20705291e0264d8bde72ec9333f7d0b304131b
MD5 f3973e4b7ac78446c3359ce145cf3bf7
SHA1 46e559705a443fd9e77d34b1aa481a9b4ae81b9b
SHA512 85b0431d94fb0a17346690a2b70168c420af0fe779509eb17083b6f399aae36661734472261422b065589ddde32956b4d8fe799298d42461d75436425b05bc62
SSDEEP 6144:ZvDTCoisoyaoKLPVT25njUNN6Q4EIReZEyBsUwoKKzCDkB:Z7ZiLpo8PV6pUNZbIRSEyBsU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40112

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrcmpA WriteConsoleInputW TryEnterCriticalSection WriteConsoleOutputCharacterW WritePrivateProfileStructA GetConsoleAliasesLengthW CopyFileExW GetModuleHandleExA SetComputerNameExA GetDriveTypeW lstrcpynA GetConsoleAliasExesLengthA FindResourceW BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA InterlockedIncrement _lwrite GetQueuedCompletionStatus VerSetConditionMask MoveFileExW ReadConsoleA InterlockedDecrement ZombifyActCtx WritePrivateProfileSectionA SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW ConnectNamedPipe GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA ReadConsoleOutputA GetConsoleAliasExesW GetDateFormatA GetCommandLineA CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetDriveTypeA GetPriorityClass GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW IsProcessInJob CopyFileW AssignProcessToJobObject GetCalendarInfoW ReadProcessMemory GetSystemWow64DirectoryW GetSystemWindowsDirectoryA FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch VerifyVersionInfoA WriteConsoleW GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW lstrcatA GetOverlappedResult GetACP lstrlenW FindNextVolumeMountPointW CreateMailslotW DeactivateActCtx GetNamedPipeHandleStateW GetConsoleAliasesW ReleaseActCtx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FillConsoleOutputCharacterW GetHandleInformation GetLastError GetLongPathNameW ReadConsoleOutputCharacterA CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer WriteProfileSectionA SetComputerNameA VerLanguageNameW GlobalGetAtomNameA DefineDosDeviceA ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd SetCalendarInfoW WritePrivateProfileStringA MoveFileA SetConsoleOutputCP GetExitCodeThread AddAtomW GetProfileStringA VirtualLock HeapLock GetCommMask HeapWalk GetTapeParameters FoldStringW SetSystemTime GlobalWire GetModuleFileNameA GetPrivateProfileSectionNamesA FindNextFileA EnumDateFormatsA FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW FindNextFileW GetStringTypeW BuildCommDCBA VirtualProtect OutputDebugStringA SetThreadAffinityMask OpenSemaphoreW EndUpdateResourceA GetVersionExA GetVersion DeleteFileW GetCurrentProcessId DeleteAtom MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW SuspendThread lstrcpyA SetUnhandledExceptionFilter WideCharToMultiByte DeleteFileA HeapValidate IsBadReadPtr RaiseException Sleep GetProcAddress ExitProcess WriteFile GetStdHandle LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType GetConsoleCP GetConsoleMode GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError SetHandleCount DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP MultiByteToWideChar SetFilePointer RtlUnwind OutputDebugStringW LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

Name

.text

Size

165KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

168KB

Virtual Size

423KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bip

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xecu

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bap

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f3973e4b7ac78446c3359ce145cf3bf7.exe

kernel32