37ed1f20c40a48806e407967a885eba9[.]exe

General

Target
37ed1f20c40a48806e407967a885eba9.exe
Size 395KB
Sample220624-swbdksdccj
SHA256 f9a291dddc31ad85007e152ada4dc5f5da083528041c42ace09287aea2fd8f18
MD5 37ed1f20c40a48806e407967a885eba9
SHA1 0b5282db1adb85a644dd26e63796368e1e553f13
SHA512 3e7ac88be3169b41411a7ff57379912907c4d7b4f5bd60b0ec6e3d3e49953d9d312a4b36adac0345abfaeeea523e72267c4059f69e2db7897d52c81e8b339e2c
SSDEEP 12288:XyAAAeeUN/sJPS1MfE9rq62fXcWpgElOp7OZM:XyAAAUR1MMNj2/TzkJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

37ed1f20c40a48806e407967a885eba9.exe

.exe 395KB

37ed1f20c40a48806e407967a885eba9.exe

IMPHASH e8fc5c770d6decb78cb40e901e7c0371
SHA256 f9a291dddc31ad85007e152ada4dc5f5da083528041c42ace09287aea2fd8f18
MD5 37ed1f20c40a48806e407967a885eba9
SHA1 0b5282db1adb85a644dd26e63796368e1e553f13
SHA512 3e7ac88be3169b41411a7ff57379912907c4d7b4f5bd60b0ec6e3d3e49953d9d312a4b36adac0345abfaeeea523e72267c4059f69e2db7897d52c81e8b339e2c
SSDEEP 12288:XyAAAeeUN/sJPS1MfE9rq62fXcWpgElOp7OZM:XyAAAUR1MMNj2/TzkJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

205503

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA InterlockedDecrement GetLocaleInfoA InterlockedIncrement _lwrite SetCommTimeouts GetSystemDirectoryA MoveFileExA CreateEventW WriteConsoleW VerifyVersionInfoW WaitNamedPipeW BuildCommDCBW LoadLibraryA FindResourceExA DeleteTimerQueue GetFirmwareEnvironmentVariableW GetConsoleAliasExesLengthW EnumTimeFormatsW CopyFileA ReadConsoleOutputCharacterW GetConsoleAliasesLengthA LocalAlloc GetProcAddress UnhandledExceptionFilter SetConsoleDisplayMode GetSystemWindowsDirectoryW LoadResource EndUpdateResourceW WritePrivateProfileStringA EnumResourceNamesA LocalReAlloc SetFileAttributesA AreFileApisANSI GetCurrentDirectoryW GetConsoleAliasesLengthW GetAtomNameA SetFileAttributesW SetConsoleTitleW VerSetConditionMask GetProcessWorkingSetSize GetLongPathNameA GetThreadLocale GetProcessHandleCount GetSystemDefaultLCID GetCurrentProcessId GetLastError SetCommBreak BuildCommDCBAndTimeoutsW OpenJobObjectA EnterCriticalSection EnumCalendarInfoExA SetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesA GlobalMemoryStatusEx WriteConsoleOutputCharacterA IsDBCSLeadByte WriteConsoleOutputCharacterW SetLastError SetEndOfFile CreateFileW GetUserDefaultLangID LoadLibraryW HeapReAlloc HeapFree HeapAlloc RaiseException RtlUnwind GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer HeapCreate GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCPInfo GetACP GetOEMCP IsValidCodePage ReadFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime Sleep SetStdHandle FlushFileBuffers HeapSize LCMapStringW MultiByteToWideChar GetStringTypeW CreateFileA GetProcessHeap

user32

ClientToScreen

gdi32

GetTextExtentPoint32W

winhttp

WinHttpCloseHandle

Name

.text

Size

258KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

40.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bibe

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wilijav

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fejoho

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lunulow

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

37ed1f20c40a48806e407967a885eba9.exe

kernel32

user32

gdi32

winhttp