9cbf47a278762b920e1e86f16c87dcc7[.]exe

General

Target
9cbf47a278762b920e1e86f16c87dcc7.exe
Size 394KB
Sample220616-hzx2msbac2
SHA256 ac537ff9525bdf020b34a70a6d17b7c85c60eb061c5f8f34e76fceacbd37ef34
MD5 9cbf47a278762b920e1e86f16c87dcc7
SHA1 81e9d81d76407f369dbcc5dde9f264b5f65f9f5e
SHA512 5c7dbeef6df3b89203ddd7b1e2915a9f59d6230e97a279c4eb45eeb4a908ae4300692af5a49a911e843c2c5468cbe5bbb06f39d96c312635afe3e37775cb7ef0
SSDEEP 12288:ZtK4snUB5IVgoUBlXLbqsGymfDes6XT0mqNk:ZYQK+Lb3mfDbm
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9cbf47a278762b920e1e86f16c87dcc7.exe

.exe 394KB

9cbf47a278762b920e1e86f16c87dcc7.exe

IMPHASH 12a660ec02c5f1f370d2b42a8031f3e8
SHA256 ac537ff9525bdf020b34a70a6d17b7c85c60eb061c5f8f34e76fceacbd37ef34
MD5 9cbf47a278762b920e1e86f16c87dcc7
SHA1 81e9d81d76407f369dbcc5dde9f264b5f65f9f5e
SHA512 5c7dbeef6df3b89203ddd7b1e2915a9f59d6230e97a279c4eb45eeb4a908ae4300692af5a49a911e843c2c5468cbe5bbb06f39d96c312635afe3e37775cb7ef0
SSDEEP 12288:ZtK4snUB5IVgoUBlXLbqsGymfDes6XT0mqNk:ZYQK+Lb3mfDbm
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationW GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterA DisableThreadLibraryCalls TerminateProcess GetCurrentProcessId GetVersionExA EnumDateFormatsW FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsA VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost GetDriveTypeW GetPriorityClass GetCompressedFileSizeA FindNextVolumeMountPointW OutputDebugStringA GetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleA SetComputerNameExW GetTimeZoneInformation LoadLibraryA GetSystemDirectoryA GetDriveTypeA GetShortPathNameW ActivateActCtx GetProfileSectionW DeleteFileW GetCommandLineA InterlockedExchangeAdd ReleaseActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectA InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryA GetExitCodeThread GetNamedPipeHandleStateA WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA UpdateResourceW InterlockedDecrement HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesA DebugBreak EndUpdateResourceW GetLastError GetStringTypeExW GetConsoleAliasesLengthA DeleteVolumeMountPointW FatalAppExitA ProcessIdToSessionId lstrcmpW SetConsoleCursorPosition SetDefaultCommConfigA VirtualAlloc GetACP CreateActCtxW GetMailslotInfo GetConsoleAliasA _lwrite GetQueuedCompletionStatus GetDiskFreeSpaceExA AddVectoredExceptionHandler WriteConsoleA VirtualProtect ReadConsoleOutputW GetThreadContext BuildCommDCBA GetHandleInformation GetComputerNameA WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA OpenWaitableTimerA CopyFileW MoveFileW GetVolumePathNameA SetConsoleMode HeapWalk SetComputerNameA FindNextFileA SetEvent UnlockFileEx MoveFileA GetProcAddress DeleteTimerQueueTimer VerifyVersionInfoW GlobalAlloc SetCommMask SetFileShortNameA FreeEnvironmentStringsW FindActCtxSectionStringW GetSystemWindowsDirectoryA GetProfileStringW GlobalGetAtomNameA SetComputerNameW GetConsoleAliasesA CreateMailslotA GetConsoleOutputCP MoveFileWithProgressA GetFileInformationByHandle SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW FindActCtxSectionStringA OpenSemaphoreW GetModuleHandleExA LoadLibraryW WriteConsoleOutputCharacterA GetFileAttributesA GetTickCount LocalUnlock GetFileTime EnumResourceNamesW OpenFileMappingA GetFileType RaiseException ReadConsoleA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind DeleteFileA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsDebuggerPresent GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetHandleCount GetStdHandle GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapReAlloc FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW SetFilePointer SetStdHandle ReadFile CloseHandle CreateFileA

user32

CharUpperA

Sharing