fa86f89afab84bea33de01d50a56fc1f[.]exe

General

Target
fa86f89afab84bea33de01d50a56fc1f.exe
Size 311KB
Sample220529-rqphkshgdn
SHA256 712b9c35cccb19d613a72ca131dfea33aea7b6e59b0dac798f5435993a33d991
MD5 fa86f89afab84bea33de01d50a56fc1f
SHA1 0632b38d3ca887e4b4f21ccf83edd2e0a34fc545
SHA512 7b315ba19b5e715a7dba67735c05a69997924b2fa85fd51d5bba373b74baeeabcddf3f5253ecab1fc4ed6544caf717fe57494c06953afbcb7044a500721db456
SSDEEP 6144:72/37gHbdiVWjJykORkpRLZMfQkx7liK5Opao5wU+gPZ5:S/3AdwMJykqkpReQuxOpaod+W5
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fa86f89afab84bea33de01d50a56fc1f.exe

.exe 311KB

fa86f89afab84bea33de01d50a56fc1f.exe

IMPHASH f4cb565e5d7d1a7d80b8c3baae241328
SHA256 712b9c35cccb19d613a72ca131dfea33aea7b6e59b0dac798f5435993a33d991
MD5 fa86f89afab84bea33de01d50a56fc1f
SHA1 0632b38d3ca887e4b4f21ccf83edd2e0a34fc545
SHA512 7b315ba19b5e715a7dba67735c05a69997924b2fa85fd51d5bba373b74baeeabcddf3f5253ecab1fc4ed6544caf717fe57494c06953afbcb7044a500721db456
SSDEEP 6144:72/37gHbdiVWjJykORkpRLZMfQkx7liK5Opao5wU+gPZ5:S/3AdwMJykqkpReQuxOpaod+W5
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54848

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA FindResourceA lstrcmpA WriteConsoleInputW TryEnterCriticalSection WriteConsoleOutputCharacterW WritePrivateProfileStructA GetConsoleAliasesLengthW GetModuleHandleExA SetComputerNameExA GetDriveTypeW MoveFileExA lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA _lwrite GetQueuedCompletionStatus VerSetConditionMask ReadConsoleA InterlockedDecrement ZombifyActCtx WritePrivateProfileSectionA GetNamedPipeHandleStateA GetProfileSectionA SetConsoleScreenBufferSize InterlockedCompareExchange WriteConsoleInputA GetComputerNameW ConnectNamedPipe GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesLengthA GetDllDirectoryW GetPrivateProfileStringW GetConsoleTitleA GetConsoleAliasExesW GetDateFormatA FindActCtxSectionStringA GetCommandLineA CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetPriorityClass GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW IsProcessInJob CopyFileW AssignProcessToJobObject GetCalendarInfoW ReadProcessMemory GetSystemWow64DirectoryW GetSystemWindowsDirectoryA ReadConsoleOutputW FormatMessageW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch VerifyVersionInfoA WriteConsoleW GetBinaryTypeA TerminateProcess GetAtomNameW GetMailslotInfo GetCompressedFileSizeA GetTimeZoneInformation CreateFileW lstrcatA GetOverlappedResult GetACP lstrlenW FindNextVolumeMountPointW RaiseException GetStringTypeExA DeactivateActCtx GetNamedPipeHandleStateW GetConsoleAliasesW ReleaseActCtx GetStartupInfoA FillConsoleOutputCharacterW GetHandleInformation GetLastError ChangeTimerQueueTimer GetLongPathNameW ReadConsoleOutputCharacterA VerLanguageNameA DefineDosDeviceW CreateNamedPipeA EnumDateFormatsExA SetComputerNameA GlobalGetAtomNameA BuildCommDCBW ResetEvent OpenWaitableTimerA GetLocalTime LoadLibraryA InterlockedExchangeAdd SetCalendarInfoW GetFileType WritePrivateProfileStringA MoveFileA SetConsoleOutputCP GetExitCodeThread AddAtomW SetCurrentDirectoryW GetProfileStringA WriteProfileSectionW VirtualLock HeapLock GetCommMask HeapWalk GetTapeParameters FoldStringW SetSystemTime GlobalWire GetModuleFileNameA GetPrivateProfileSectionNamesA FindNextFileA EnumDateFormatsA FindFirstChangeNotificationA lstrcatW FreeEnvironmentStringsW EnumResourceNamesA FindNextFileW CreateMailslotA GetStringTypeW VirtualProtect OutputDebugStringA GetCPInfoExA SetThreadAffinityMask OpenSemaphoreW EndUpdateResourceA GetVersionExA GetVersion DeleteFileW GetCurrentProcessId MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW OpenFileMappingA SuspendThread CopyFileExA lstrcpyA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteFileA GetModuleFileNameW HeapValidate IsBadReadPtr RtlUnwind GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetStdHandle WriteFile OutputDebugStringW ExitProcess SetHandleCount QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetLocaleInfoA SetFilePointer InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle CreateFileA

Name

.text

Size

192KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

68KB

Virtual Size

323KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vigur

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.loxekuv

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bici

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

fa86f89afab84bea33de01d50a56fc1f.exe

kernel32