861e554921be5f20c8d475fd879e7d29[.]exe

General

Target
861e554921be5f20c8d475fd879e7d29.exe
Size 390KB
Sample220627-xxmkfschdm
SHA256 b391f976ef1b8d61400aee7717095db388174e8c0198624b3766ed020c2d656b
MD5 861e554921be5f20c8d475fd879e7d29
SHA1 049cb37be905b09a1834d92ade555329b8e6d217
SHA512 cf5b7f820192866bcddbd713d965e8961a3bb6a8e982a6714782db2f568435ce2923d6268153c3bfeaf6ceb7e662abe897da71d9720e4a22e488c5b244c5d7e8
SSDEEP 12288:jFOSwgcY6/VECj9kaE3AK5y5qRHASYSxF:8SwgG/VVjPpK5ykS4L
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

861e554921be5f20c8d475fd879e7d29.exe

.exe 390KB

861e554921be5f20c8d475fd879e7d29.exe

IMPHASH ec3bfeb025110fb411f85a2a0456d05d
SHA256 b391f976ef1b8d61400aee7717095db388174e8c0198624b3766ed020c2d656b
MD5 861e554921be5f20c8d475fd879e7d29
SHA1 049cb37be905b09a1834d92ade555329b8e6d217
SHA512 cf5b7f820192866bcddbd713d965e8961a3bb6a8e982a6714782db2f568435ce2923d6268153c3bfeaf6ceb7e662abe897da71d9720e4a22e488c5b244c5d7e8
SSDEEP 12288:jFOSwgcY6/VECj9kaE3AK5y5qRHASYSxF:8SwgG/VVjPpK5ykS4L
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

61184

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugSetProcessKillOnExit FindNextChangeNotification GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterA EnumSystemCodePagesW TerminateProcess GetProcessId VerifyVersionInfoA EnumDateFormatsA FindNextFileA CopyFileExA BuildCommDCBAndTimeoutsW VirtualUnlock WriteProfileStringW VerifyVersionInfoW GetDriveTypeA GetFileType DeleteFileW FindNextVolumeMountPointW OutputDebugStringA ResetWriteWatch WriteConsoleInputW GetConsoleTitleA GetComputerNameExW SetTimeZoneInformation CallNamedPipeA LoadLibraryA GetSystemDirectoryA GetDriveTypeW BuildCommDCBAndTimeoutsA ActivateActCtx GetProfileSectionW GetCommandLineW AddRefActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectA InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryW TerminateThread CreateNamedPipeW WritePrivateProfileStringW GetConsoleAliasesLengthA WriteProfileSectionW AddAtomA InterlockedDecrement GetVersionExW HeapSize _hwrite GetStartupInfoA ConnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW GetPrivateProfileIntA GetConsoleAliasExesA DebugBreak EndUpdateResourceW InterlockedExchangeAdd SetLastError GetStringTypeExA DeleteVolumeMountPointW SetDefaultCommConfigW lstrcpyA GetOEMCP _lwrite GetNamedPipeHandleStateA GetDiskFreeSpaceExW CreateJobSet WriteConsoleA VirtualProtect ReadConsoleOutputA SetThreadContext BuildCommDCBW ReleaseActCtx FoldStringA GetHandleInformation WritePrivateProfileSectionA DeleteCriticalSection GetFileAttributesA OpenWaitableTimerW SetConsoleMode HeapSetInformation SetComputerNameA SetEvent UnlockFile GetProcAddress ChangeTimerQueueTimer CopyFileW MoveFileA GlobalAlloc GetCommMask SetFileShortNameW GetFileAttributesW FreeEnvironmentStringsW GetProfileStringA SetComputerNameW GetConsoleAliasesW ReadConsoleInputW CreateMailslotA EnumDateFormatsW GetTimeZoneInformation SetConsoleOutputCP GetFileInformationByHandle SetLocalTime FoldStringW CallNamedPipeW GetCurrentActCtx CopyFileExW OpenSemaphoreW GetModuleHandleExA LoadLibraryW GetConsoleAliasExesLengthW GetTickCount LocalFlags FindFirstVolumeW CancelDeviceWakeupRequest SetFileTime GetQueuedCompletionStatus lstrcatW OpenWaitableTimerA EnumResourceNamesW OpenFileMappingW UnregisterWait UnhandledExceptionFilter GetCompressedFileSizeW GetThreadPriority ReadConsoleW AssignProcessToJobObject InterlockedIncrement Sleep EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW OutputDebugStringW ExitProcess GetACP GetCPInfo IsValidCodePage QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW SetStdHandle GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA DeleteFileA

Sharing