b1a8efde1f3e2267184c93a655b1d185[.]exe

General

Target
b1a8efde1f3e2267184c93a655b1d185.exe
Size 331KB
Sample220708-kbvbysbce4
SHA256 cd8537c6b8570fab834a3f706e6046972f2affe1204a80b824ab656e4da5f7f8
MD5 b1a8efde1f3e2267184c93a655b1d185
SHA1 0d048169b23c7e767f223be616096b2b14e58b4d
SHA512 8585629a2d7e2f2d3888e7e48083696c045009b6852fe57a50591ad7d7dd9c316143a9b4e0bc3ebfb2eb039da85cadbd5c9e6bd26788d3ec03a1e59628251141
SSDEEP 6144:GWj1jGHN2kUTtKT3pS4YIKUc4nsMgSun5AYFkfRlSoVGP:h1gN21TwLpSOKUcLSu5AYWfR8p
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b1a8efde1f3e2267184c93a655b1d185.exe

.exe 331KB

b1a8efde1f3e2267184c93a655b1d185.exe

IMPHASH 16c6db61a45b1cc9e03eb41acced74bb
SHA256 cd8537c6b8570fab834a3f706e6046972f2affe1204a80b824ab656e4da5f7f8
MD5 b1a8efde1f3e2267184c93a655b1d185
SHA1 0d048169b23c7e767f223be616096b2b14e58b4d
SHA512 8585629a2d7e2f2d3888e7e48083696c045009b6852fe57a50591ad7d7dd9c316143a9b4e0bc3ebfb2eb039da85cadbd5c9e6bd26788d3ec03a1e59628251141
SSDEEP 6144:GWj1jGHN2kUTtKT3pS4YIKUc4nsMgSun5AYFkfRlSoVGP:h1gN21TwLpSOKUcLSu5AYWfR8p
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54576

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetCurrentProcess GetNamedPipeHandleStateW GetQueuedCompletionStatus FillConsoleOutputCharacterW EnumSystemCodePagesW LocalUnlock GetVolumeNameForVolumeMountPointA GetVersionExA VerifyVersionInfoA WriteConsoleInputA EnumDateFormatsW FindNextFileA CopyFileExW BuildCommDCBAndTimeoutsW VirtualLock WriteProfileStringA VerifyVersionInfoW GetFileInformationByHandle DeleteFileA FindNextVolumeMountPointW TlsGetValue LoadResource WriteConsoleInputW GetConsoleTitleA GetComputerNameExW OpenEventA GetModuleHandleA GetSystemDirectoryA GetDriveTypeW BuildCommDCBAndTimeoutsA LoadLibraryA GetShortPathNameW ReleaseActCtx DeleteFileW GetCommandLineA InterlockedIncrement InterlockedExchange CopyFileW CreateActCtxW FormatMessageW GetModuleFileNameA EnterCriticalSection FindNextVolumeW GetExitCodeThread CreateNamedPipeW GetUserDefaultLCID GetConsoleAliasesLengthW WriteProfileSectionA AddAtomA InterlockedDecrement GetVersionExW HeapSize _hwrite InterlockedCompareExchange GetStartupInfoA CreateMailslotA GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetPrivateProfileIntW GetConsoleAliasExesW DebugBreak EndUpdateResourceW GetTickCount VirtualQuery OpenFileMappingA GetModuleHandleW GetDefaultCommConfigA VirtualAlloc TerminateProcess GetACP CreateIoCompletionPort GetDiskFreeSpaceExA DefineDosDeviceA GetExitCodeProcess EnumResourceTypesA SetConsoleTextAttribute EndUpdateResourceA IsProcessInJob MoveFileA lstrcpynW WriteConsoleA GetProcAddress lstrcatA LoadLibraryW ReadConsoleOutputA GetStartupInfoW FoldStringW WritePrivateProfileStringW SetHandleInformation WritePrivateProfileStructA DeleteCriticalSection GetFileAttributesA GetCurrentActCtx CopyFileA CancelDeviceWakeupRequest ResetEvent LockFile MoveFileW DisableThreadLibraryCalls GetOverlappedResult GetCommTimeouts FormatMessageA InterlockedExchangeAdd GlobalAlloc SetThreadPriorityBoost SetFileShortNameA GetFileAttributesW SetCalendarInfoW ConvertFiberToThread SetComputerNameA GetConsoleAliasesW EnumDateFormatsA SetTimeZoneInformation SetConsoleOutputCP MoveFileWithProgressW GetStdHandle GetLocalTime FoldStringA EnumSystemLocalesW ActivateActCtx CopyFileExA CreateMemoryResourceNotification OpenSemaphoreA GetModuleHandleExA AddAtomW _hread GetFileType UnhandledExceptionFilter GetConsoleAliasesLengthA GetProcessShutdownParameters lstrcpynA GlobalUnWire GetCompressedFileSizeA ReadConsoleA FreeUserPhysicalPages WriteConsoleOutputCharacterW TerminateJobObject CreateFileA SetTimerQueueTimer SetUnhandledExceptionFilter RaiseException HeapValidate IsBadReadPtr LeaveCriticalSection GetModuleFileNameW IsDebuggerPresent GetLastError SetFilePointer SetStdHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep ExitProcess SetHandleCount QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapReAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW OutputDebugStringW FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle ReadFile

user32

CharUpperA

Name

.text

Size

234KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wok

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zupij

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fovehi

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nevok

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b1a8efde1f3e2267184c93a655b1d185.exe

kernel32

user32