226e4b7605e4c90176f917f6a0f8d371[.]exe

General

Target
226e4b7605e4c90176f917f6a0f8d371.exe
Size 288KB
Sample220616-ebmdfsdce3
SHA256 9beb5f534f8cc8e7634e183bfcab1a32b14615ff397c41e004c688bb957d32a3
MD5 226e4b7605e4c90176f917f6a0f8d371
SHA1 e6a387a38c9963fc0197e60f69ad50a3c6aa93ea
SHA512 536eec9ac07e90f625d15a601852fc9af77cb099e8bef982f3107f3360c690a843d402209bad837fdc3f9dce706b4c3613f689e721df677035922bef1b94ac20
SSDEEP 6144:6hTU/NnbmF/GDwj/qIRX7ZCW4Ok0+xD+:6hQdbmF/GDw2E8W4D
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

226e4b7605e4c90176f917f6a0f8d371.exe

.exe 288KB

226e4b7605e4c90176f917f6a0f8d371.exe

IMPHASH 39a5e63add263fb8a93124d0be6cfbe2
SHA256 9beb5f534f8cc8e7634e183bfcab1a32b14615ff397c41e004c688bb957d32a3
MD5 226e4b7605e4c90176f917f6a0f8d371
SHA1 e6a387a38c9963fc0197e60f69ad50a3c6aa93ea
SHA512 536eec9ac07e90f625d15a601852fc9af77cb099e8bef982f3107f3360c690a843d402209bad837fdc3f9dce706b4c3613f689e721df677035922bef1b94ac20
SSDEEP 6144:6hTU/NnbmF/GDwj/qIRX7ZCW4Ok0+xD+:6hQdbmF/GDw2E8W4D
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationW GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterA DisableThreadLibraryCalls TerminateProcess GetCurrentProcessId GetVersionExA EnumDateFormatsW FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsA VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost GetDriveTypeW GetPriorityClass GetCompressedFileSizeA FindNextVolumeMountPointW OutputDebugStringA GetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleA SetComputerNameExW GetTimeZoneInformation LoadLibraryA GetSystemDirectoryA GetDriveTypeA GetShortPathNameW ActivateActCtx GetProfileSectionW DeleteFileW GetCommandLineA InterlockedExchangeAdd ReleaseActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectA InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryA GetExitCodeThread GetNamedPipeHandleStateA WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA UpdateResourceW InterlockedDecrement HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesA DebugBreak EndUpdateResourceW GetLastError GetStringTypeExW GetConsoleAliasesLengthA DeleteVolumeMountPointW FatalAppExitA ProcessIdToSessionId lstrcmpW SetConsoleCursorPosition SetDefaultCommConfigA VirtualAlloc GetOEMCP CreateActCtxW GetMailslotInfo GetConsoleAliasA _lwrite GetQueuedCompletionStatus GetDiskFreeSpaceExA AddVectoredExceptionHandler WriteConsoleA VirtualProtect ReadConsoleOutputA GetThreadContext BuildCommDCBA GetHandleInformation GetComputerNameA WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA OpenWaitableTimerA CopyFileW MoveFileW GetVolumePathNameA SetConsoleMode HeapWalk SetComputerNameA FindNextFileA SetEvent UnlockFileEx MoveFileA GetProcAddress DeleteTimerQueueTimer VerifyVersionInfoW GlobalAlloc SetCommMask SetFileShortNameW FreeEnvironmentStringsW FindActCtxSectionStringW GetSystemWindowsDirectoryA GetProfileStringW GlobalGetAtomNameA SetComputerNameW GetConsoleAliasesA CreateMailslotA GetConsoleOutputCP MoveFileWithProgressA GetFileInformationByHandle SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW FindActCtxSectionStringA OpenSemaphoreW GetModuleHandleExA LoadLibraryW WriteConsoleOutputCharacterA GetFileAttributesA GetTickCount LocalUnlock GetFileTime EnumResourceNamesW OpenFileMappingA GetFileType RaiseException ReadConsoleA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteFileA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsDebuggerPresent GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetACP GetCPInfo IsValidCodePage SetHandleCount GetStdHandle GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapReAlloc FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW SetFilePointer SetStdHandle ReadFile CloseHandle CreateFileA

user32

CharUpperA

Sharing