5ffde092e123d2bb6b39fe859bd79e0f[.]exe

General

Target
5ffde092e123d2bb6b39fe859bd79e0f.exe
Size 239KB
Sample220616-e2hsysead6
SHA256 c2b5944c9c75cd9124f93c290aa36e7555976b3c7f532831d07dcae75d1a7920
MD5 5ffde092e123d2bb6b39fe859bd79e0f
SHA1 e3dc3a4ed963f671c753297acc3313d3a015c0f3
SHA512 fdbca0a1d59ea5d8020d8e807efa3d927d9a22c3161d7fa1032a9761fd04e34f86bb19a0ac98c32c5ad93a82978976a9888a4c154f4e5a815112a2b62b86efa2
SSDEEP 3072:ppZwveFL+d6VyIV2Ix3pEXS+xF3ONTF0dOsUmzRv4:XKM+4VyIYIxgS+viTF0MsUmz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5ffde092e123d2bb6b39fe859bd79e0f.exe

.exe 239KB

5ffde092e123d2bb6b39fe859bd79e0f.exe

IMPHASH 048c9dcf64600ba5236326172eb55101
SHA256 c2b5944c9c75cd9124f93c290aa36e7555976b3c7f532831d07dcae75d1a7920
MD5 5ffde092e123d2bb6b39fe859bd79e0f
SHA1 e3dc3a4ed963f671c753297acc3313d3a015c0f3
SHA512 fdbca0a1d59ea5d8020d8e807efa3d927d9a22c3161d7fa1032a9761fd04e34f86bb19a0ac98c32c5ad93a82978976a9888a4c154f4e5a815112a2b62b86efa2
SSDEEP 3072:ppZwveFL+d6VyIV2Ix3pEXS+xF3ONTF0dOsUmzRv4:XKM+4VyIYIxgS+viTF0MsUmz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24083

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA UnhandledExceptionFilter GetModuleFileNameA CreateSemaphoreA EnumCalendarInfoExA WriteConsoleInputA ReadConsoleInputA GetSystemDirectoryW WriteConsoleW WaitNamedPipeA BuildCommDCBW InterlockedIncrement BeginUpdateResourceA CancelTimerQueueTimer GetCPInfoExA GetModuleFileNameW GetConsoleAliasExesLengthW EnumTimeFormatsW CopyFileW ReadConsoleOutputCharacterW GetConsoleAliasesLengthA GlobalAlloc GetProcAddress LoadLibraryW GetUserDefaultLCID CancelWaitableTimer SizeofResource WaitForMultipleObjects lstrlenW EnumResourceNamesW CommConfigDialogW SetFileAttributesW AreFileApisANSI LCMapStringW GetFileAttributesA SetConsoleTitleA CreateHardLinkW SetLastError GetSystemDefaultLCID GetConsoleProcessList BuildCommDCBAndTimeoutsA OpenJobObjectW AddRefActCtx FindResourceExA SetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesA InitializeCriticalSection GetConsoleOutputCP CloseHandle CreateFileW HeapSize FlushFileBuffers GetLastError HeapReAlloc HeapAlloc MultiByteToWideChar RtlUnwind GetCommandLineA HeapSetInformation GetStartupInfoW DecodePointer SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate HeapFree GetModuleHandleW ExitProcess WriteFile GetStdHandle GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection Sleep GetStringTypeW RaiseException SetStdHandle

user32

ClientToScreen

winhttp

WinHttpCreateUrl

Sharing