1286f2546e331f703a1a15a66d2725f0[.]exe

General

Target
1286f2546e331f703a1a15a66d2725f0.exe
Size 282KB
Sample220601-197ypscac2
SHA256 a85ff96e995d7de699d455c7b5f9ca4fc832892080fa640a3d80332c361c624b
MD5 1286f2546e331f703a1a15a66d2725f0
SHA1 b53b5376e18bc03a85e8d714df1099090f3395c6
SHA512 ebae78dc9a6b63bd2bb7d5cf119ec922c7b3bcb2043f8622f6ac4e8e2e9e58a8a4baa0deae2e6ca20d30c0ef13606e80966782b9087612552871d1eb7d9aa30f
SSDEEP 6144:P7nlZiH73I8v1cBn+5fc5CNTobHgNaUyS7x2m3Ne7wDc:PDlQT9vGh+d0CNxNaUXx33NI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1286f2546e331f703a1a15a66d2725f0.exe

.exe 282KB

1286f2546e331f703a1a15a66d2725f0.exe

IMPHASH 108e59fc9121c3690210f4d6dc5641aa
SHA256 a85ff96e995d7de699d455c7b5f9ca4fc832892080fa640a3d80332c361c624b
MD5 1286f2546e331f703a1a15a66d2725f0
SHA1 b53b5376e18bc03a85e8d714df1099090f3395c6
SHA512 ebae78dc9a6b63bd2bb7d5cf119ec922c7b3bcb2043f8622f6ac4e8e2e9e58a8a4baa0deae2e6ca20d30c0ef13606e80966782b9087612552871d1eb7d9aa30f
SSDEEP 6144:P7nlZiH73I8v1cBn+5fc5CNTobHgNaUyS7x2m3Ne7wDc:PDlQT9vGh+d0CNxNaUXx33NI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56576

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFullPathNameW FindResourceA lstrcmpA WriteConsoleInputW TryEnterCriticalSection WriteConsoleOutputCharacterW WritePrivateProfileStructA GetConsoleAliasesLengthW SetComputerNameExA MoveFileExA lstrcpynA GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA LoadResource UpdateResourceA DeleteVolumeMountPointA _lwrite GetQueuedCompletionStatus ReadConsoleA InterlockedDecrement ZombifyActCtx WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW CreateJobObjectW GetModuleHandleExW GetProfileSectionA InterlockedCompareExchange WriteConsoleInputA SetComputerNameW GetComputerNameW FlushConsoleInputBuffer ConnectNamedPipe CallNamedPipeW GetProcessPriorityBoost GetModuleHandleW GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA GetDllDirectoryW GetConsoleTitleA GetCompressedFileSizeW GetCurrencyFormatA GetConsoleAliasExesW GetDateFormatA GetUserDefaultLangID GetCommandLineA CreateActCtxW EnumResourceTypesA GetDriveTypeA GetPriorityClass GetVolumePathNameW GlobalAlloc GetSystemDirectoryW SetFileShortNameW LoadLibraryW CopyFileW AssignProcessToJobObject GetCalendarInfoW ReadProcessMemory GetSystemWow64DirectoryW ReadConsoleOutputW FormatMessageW GetVersionExW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetWriteWatch SetConsoleCursorPosition VerifyVersionInfoA WriteConsoleW GetBinaryTypeA TerminateProcess GetMailslotInfo GetTimeZoneInformation CreateFileW lstrcatA GetBinaryTypeW GetOverlappedResult GetACP lstrlenW FindNextVolumeMountPointW SetThreadPriority RaiseException GetStringTypeExA DeactivateActCtx GetNamedPipeHandleStateW GetPrivateProfileIntW SetCurrentDirectoryA GetStartupInfoA FillConsoleOutputCharacterW FreeLibraryAndExitThread GetHandleInformation GetLastError ChangeTimerQueueTimer GetLongPathNameW ReadConsoleOutputCharacterA VerLanguageNameA DefineDosDeviceW EnumDateFormatsExA CreateJobSet LocalLock WriteProfileSectionA EnterCriticalSection BuildCommDCBW FindClose GetPrivateProfileStringA ResetEvent _hwrite GetLocalTime GetAtomNameA LoadLibraryA InterlockedExchangeAdd OpenWaitableTimerW SetCalendarInfoW GetFileType WritePrivateProfileStringA MoveFileA SetConsoleOutputCP GetExitCodeThread AddAtomW GetProfileStringA VirtualLock GlobalGetAtomNameW GetCommMask HeapWalk GetTapeParameters FoldStringW SetSystemTime GetModuleFileNameA GetPrivateProfileSectionNamesA FindNextFileA WriteProfileStringA EnumDateFormatsA GlobalUnWire FindFirstChangeNotificationA QueueUserWorkItem lstrcatW FreeEnvironmentStringsW EnumResourceNamesA FindNextFileW CreateMailslotA GetStringTypeW VirtualProtect FatalAppExitA OutputDebugStringA GetCPInfoExA SetThreadAffinityMask OpenSemaphoreW EndUpdateResourceA GetVersionExA GetDiskFreeSpaceExW GetVersion FindFirstVolumeW GetCurrentProcessId MoveFileWithProgressW GetFileInformationByHandle DebugBreak FindActCtxSectionStringW OpenFileMappingA EnumSystemLocalesW SuspendThread CopyFileExA DeleteFileA lstrcpyA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetModuleFileNameW GetStartupInfoW HeapValidate IsBadReadPtr RtlUnwind SetStdHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetOEMCP GetCPInfo IsValidCodePage GetStdHandle OutputDebugStringW ExitProcess QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP SetFilePointer GetStringTypeA GetLocaleInfoA LCMapStringA LCMapStringW CreateFileA CloseHandle ReadFile

Name

.text

Size

195KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

710KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tepolij

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yaw

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kutege

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1286f2546e331f703a1a15a66d2725f0.exe

kernel32