1cfeba229cdd2427c0826bee1faf752d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
1cfeba229cdd2427c0826bee1faf752d.exe
Size 220KB
Sample220707-g92bdaeecq
SHA256 32b3315116c7b059a47246f74e5088737be1f5ea86fee883786e4dc69ff0d528
MD5 1cfeba229cdd2427c0826bee1faf752d
SHA1 b66630ac651b4b4310f4316b349f065785281475
SHA512 e1a7c82cdea0878c2769bca5f188cc4a714e0cc0c2c07906329b7fad0afb08b75a135d944524a0b94ba903e9c2902424d5650b7bbef0f3b596722cd1579008e0
SSDEEP 3072:wz0pDlyrfjhtXzweN3guZ1pc6oI9FeMf/PfGQjfhXIFtFsxkgaBChcpZa9uD6Vdp:zlGnD+qc6ZDt/rp3igafwVf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1cfeba229cdd2427c0826bee1faf752d.exe

.exe 220KB

1cfeba229cdd2427c0826bee1faf752d.exe

IMPHASH 55a2b5a2ae91031aec8b458899df3011
SHA256 32b3315116c7b059a47246f74e5088737be1f5ea86fee883786e4dc69ff0d528
MD5 1cfeba229cdd2427c0826bee1faf752d
SHA1 b66630ac651b4b4310f4316b349f065785281475
SHA512 e1a7c82cdea0878c2769bca5f188cc4a714e0cc0c2c07906329b7fad0afb08b75a135d944524a0b94ba903e9c2902424d5650b7bbef0f3b596722cd1579008e0
SSDEEP 3072:wz0pDlyrfjhtXzweN3guZ1pc6oI9FeMf/PfGQjfhXIFtFsxkgaBChcpZa9uD6Vdp:zlGnD+qc6ZDt/rp3igafwVf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

83256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetLocaleInfoA InterlockedIncrement _lwrite GetCommTimeouts GetSystemDirectoryA CreateEventW WriteConsoleW VerifyVersionInfoA BuildCommDCBW AddConsoleAliasW HeapLock PeekConsoleInputW EnumDateFormatsW ResetEvent UnregisterWait LoadLibraryA WaitNamedPipeW FindResourceExA DeleteTimerQueue GetFirmwareEnvironmentVariableW GetModuleFileNameW BeginUpdateResourceW GetConsoleAliasExesLengthW EnumTimeFormatsW CopyFileA ReadConsoleOutputCharacterA UnhandledExceptionFilter LocalAlloc GetProcAddress GetUserDefaultLangID GetSystemWindowsDirectoryW FindFirstChangeNotificationA EndUpdateResourceW WritePrivateProfileStringA EnumResourceNamesA LocalReAlloc GlobalReAlloc AreFileApisANSI GetCurrentDirectoryA GetConsoleAliasesLengthW GetAtomNameA SetFileAttributesA SetConsoleTitleW VerSetConditionMask GetCurrentProcess GetProcessWorkingSetSize GetLongPathNameW GetThreadLocale GetSystemDefaultLCID GetCurrentProcessId GetLastError SetComputerNameExA FindFirstFileExA BuildCommDCBAndTimeoutsW EnterCriticalSection EnumCalendarInfoExW GetDiskFreeSpaceA GetConsoleAliasExesA GlobalMemoryStatus WriteConsoleOutputCharacterA EnumSystemLocalesA GetComputerNameA VerifyVersionInfoW CreateFileW GetConsoleAliasesLengthA LoadLibraryW GetStringTypeW LCMapStringW HeapReAlloc HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer TerminateProcess SetFilePointer HeapAlloc HeapCreate ReadFile WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle GetModuleHandleW ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind SetStdHandle FlushFileBuffers MultiByteToWideChar RaiseException HeapSize

user32

ClientToScreen

gdi32

GetTextExtentExPointW

winhttp

WinHttpReadData WinHttpCloseHandle

Name

.text

Size

122KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reviyur

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bican

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.refo

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kufi

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vuzox

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

81KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ