10b1bc4994dff5fa916cc43992bba45c[.]exe

General

Target
10b1bc4994dff5fa916cc43992bba45c.exe
Size 227KB
Sample220715-pdqtrsbeem
SHA256 0236a680578f43b478602be6d2b008356b61c378bf2cdeee55b1793e992522a7
MD5 10b1bc4994dff5fa916cc43992bba45c
SHA1 7dba9d8e57d1d112a784c37ed9232e9b8dafe828
SHA512 b4fbe5ac9b7598a090ab1fdaa5e4bcbe02816397cf50a6810f7b75cf65c463327cddb251696827707c60de9a5edbfbdda3103a4a9ea35ede508c38beb7273c2a
SSDEEP 6144:kszmlx1S01kS+6wg2QscjSro6JAsigafwVf:kamzY01kSv2Qs0WOp
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

10b1bc4994dff5fa916cc43992bba45c.exe

.exe 227KB

10b1bc4994dff5fa916cc43992bba45c.exe

IMPHASH 9f34cade94b987c6f286411305857db0
SHA256 0236a680578f43b478602be6d2b008356b61c378bf2cdeee55b1793e992522a7
MD5 10b1bc4994dff5fa916cc43992bba45c
SHA1 7dba9d8e57d1d112a784c37ed9232e9b8dafe828
SHA512 b4fbe5ac9b7598a090ab1fdaa5e4bcbe02816397cf50a6810f7b75cf65c463327cddb251696827707c60de9a5edbfbdda3103a4a9ea35ede508c38beb7273c2a
SSDEEP 6144:kszmlx1S01kS+6wg2QscjSro6JAsigafwVf:kamzY01kSv2Qs0WOp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

86486

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnhandledExceptionFilter GetModuleFileNameA GetLocaleInfoA _lwrite GetCommTimeouts GetSystemDirectoryA CreateEventA WriteConsoleW BuildCommDCBA AddConsoleAliasW HeapLock PeekConsoleInputW EnumDateFormatsA ResetEvent UnregisterWait LoadLibraryA InterlockedDecrement VerifyVersionInfoA WaitNamedPipeW FindResourceExW VirtualQuery GetFirmwareEnvironmentVariableW GetModuleFileNameW BeginUpdateResourceW GetConsoleAliasExesLengthW DeleteFileW WriteConsoleOutputCharacterW WriteConsoleA LocalAlloc GetProcAddress GetUserDefaultLangID GetConsoleAliasesLengthA GetSystemWindowsDirectoryA WritePrivateProfileStringW EnumResourceNamesW SearchPathA CreateDirectoryA RemoveDirectoryW AreFileApisANSI GetCurrentDirectoryW SetFileAttributesW CreateMutexA GetNumaHighestNodeNumber GetLongPathNameA VirtualProtect GetThreadLocale GetCurrentProcessId SetLastError GetComputerNameExW FindNextFileA BuildCommDCBAndTimeoutsW InitializeCriticalSection EnumCalendarInfoA _lopen GetConsoleAliasExesW GlobalMemoryStatus ReadConsoleOutputCharacterW EnumSystemLocalesW GetComputerNameA GetLastError EnumTimeFormatsA LoadLibraryW GetProcessHeap RaiseException RtlUnwind GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapAlloc HeapFree IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount SetHandleCount GetStdHandle GetFileType DeleteCriticalSection WriteFile ReadFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep MultiByteToWideChar HeapSize SetStdHandle FlushFileBuffers CreateFileA LCMapStringW GetStringTypeW HeapReAlloc SetEndOfFile CreateFileW

advapi32

OpenEventLogA

ole32

OleUninitialize

winhttp

WinHttpCloseHandle

Sharing