c23cfe2f2c3ca19a63b0fec275f6d258[.]exe

General

Target
c23cfe2f2c3ca19a63b0fec275f6d258.exe
Size 434KB
Sample220708-red8gafcf4
SHA256 62914547213cd93980d10ba7a6bda8efd6104f62e4e8fabb11141737fb8b932f
MD5 c23cfe2f2c3ca19a63b0fec275f6d258
SHA1 11a47ad522cdc3afe5395637446d5df08d779225
SHA512 70e313b572e18d536ab662cd5fbcf7175d70f5d2aaa587055ce518fb123a2c07adbd4589dfe160f8213194e60b8cf173097488387cb36898c23ad5853f8d1d5f
SSDEEP 12288:hksGLqQ2eQwSgFrIcXmfI/2pt9UUGV7LhUMD:+fS2IcMIubiUGV7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c23cfe2f2c3ca19a63b0fec275f6d258.exe

.exe 434KB

c23cfe2f2c3ca19a63b0fec275f6d258.exe

IMPHASH dd691aa7a06ce54500e5f0ebbddf1c7f
SHA256 62914547213cd93980d10ba7a6bda8efd6104f62e4e8fabb11141737fb8b932f
MD5 c23cfe2f2c3ca19a63b0fec275f6d258
SHA1 11a47ad522cdc3afe5395637446d5df08d779225
SHA512 70e313b572e18d536ab662cd5fbcf7175d70f5d2aaa587055ce518fb123a2c07adbd4589dfe160f8213194e60b8cf173097488387cb36898c23ad5853f8d1d5f
SSDEEP 12288:hksGLqQ2eQwSgFrIcXmfI/2pt9UUGV7LhUMD:+fS2IcMIubiUGV7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

54608

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexW GetCurrentProcess GetNamedPipeHandleStateW GetQueuedCompletionStatus FillConsoleOutputCharacterW EnumSystemCodePagesW LocalUnlock GetVolumeNameForVolumeMountPointA GetVersionExA VerifyVersionInfoA WriteConsoleInputA EnumDateFormatsW FindNextFileA CopyFileExW BuildCommDCBAndTimeoutsW VirtualLock WriteProfileStringA VerifyVersionInfoW GetFileInformationByHandle DeleteFileA FindNextVolumeMountPointW TlsSetValue LoadResource WriteConsoleInputW GetConsoleTitleA GetComputerNameExW OpenEventA GetModuleHandleA GetSystemDirectoryW GetDriveTypeW BuildCommDCBAndTimeoutsA LoadLibraryA GetShortPathNameW ReleaseActCtx DeleteFileW GetCommandLineA InterlockedIncrement InterlockedExchange CopyFileW CreateActCtxW FormatMessageW GetModuleFileNameA EnterCriticalSection FindNextVolumeW GetExitCodeThread CreateNamedPipeW GetUserDefaultLCID GetConsoleAliasesLengthW WriteProfileSectionA AddAtomA InterlockedDecrement GetVersionExW HeapSize _hwrite InterlockedCompareExchange GetStartupInfoA CreateMailslotA GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetPrivateProfileIntW GetConsoleAliasExesA DebugBreak EndUpdateResourceW GetTickCount VirtualQuery OpenFileMappingA GetModuleHandleW GetDefaultCommConfigA VirtualAlloc TerminateProcess GetACP CreateIoCompletionPort GetDiskFreeSpaceExA DefineDosDeviceA GetExitCodeProcess EnumResourceTypesA SetConsoleTextAttribute GlobalGetAtomNameA IsProcessInJob MoveFileA lstrcpynW WriteConsoleA GetProcAddress lstrcatA LoadLibraryW ReadConsoleOutputA GetStartupInfoW FoldStringW WritePrivateProfileStringW SetHandleInformation WritePrivateProfileStructA DeleteCriticalSection GetFileAttributesA GetCurrentActCtx CopyFileA CancelDeviceWakeupRequest ResetEvent LockFile MoveFileW DisableThreadLibraryCalls GetOverlappedResult GetCommTimeouts FormatMessageA InterlockedExchangeAdd GlobalAlloc SetThreadPriorityBoost SetFileShortNameA GetFileAttributesW SetCalendarInfoW ConvertFiberToThread SetComputerNameA GetConsoleAliasesW EnumDateFormatsExW SetTimeZoneInformation SetConsoleOutputCP MoveFileWithProgressW GetStdHandle GetLocalTime FoldStringA EnumSystemLocalesW DeactivateActCtx CopyFileExA CreateMemoryResourceNotification OpenSemaphoreA GetModuleHandleExA AddAtomW _hread GetFileType UnhandledExceptionFilter GetConsoleAliasesLengthA GetProcessShutdownParameters lstrcpynA GlobalUnWire GetCompressedFileSizeW ReadConsoleA MapUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectW CreateFileA SetTimerQueueTimer SetUnhandledExceptionFilter RaiseException HeapValidate IsBadReadPtr LeaveCriticalSection GetModuleFileNameW IsDebuggerPresent GetLastError SetFilePointer SetStdHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep ExitProcess SetHandleCount QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsFree HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapReAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW OutputDebugStringW FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle ReadFile

user32

CharUpperA

Name

.text

Size

234KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

173KB

Virtual Size

6.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lehax

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fahekoj

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yufidu

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nal

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c23cfe2f2c3ca19a63b0fec275f6d258.exe

kernel32

user32