e394d7e540638b8e3fd2dbd3cff33c94[.]exe

General

Target
e394d7e540638b8e3fd2dbd3cff33c94.exe
Size 406KB
Sample220717-bc823aaecl
SHA256 fadccfb4e4f78b3fa9a789e7a39e044658f3d9fe85322d024397ec229ba7c974
MD5 e394d7e540638b8e3fd2dbd3cff33c94
SHA1 6ed72d806f999d079c9fe2012d576e7a38573964
SHA512 3c52a998506c889ceceb0396ff84b430745af505498508a61d5db4ef5cc15ac0885e6e837e2260218e7f9d63c63ccf8e1e10f1f92b3d87d80c52ec79c99c1736
SSDEEP 6144:3dks3RUhfUSQSg/n+VzMGdaeGv1BKtmIVDRnd5HeR0KEdI10mMKtbz:3thU93Den+VzMGorKtLvnd5HJCSmMO3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e394d7e540638b8e3fd2dbd3cff33c94.exe

.exe 406KB

e394d7e540638b8e3fd2dbd3cff33c94.exe

IMPHASH 67b6405ac99a13af0fddde5923fb8811
SHA256 fadccfb4e4f78b3fa9a789e7a39e044658f3d9fe85322d024397ec229ba7c974
MD5 e394d7e540638b8e3fd2dbd3cff33c94
SHA1 6ed72d806f999d079c9fe2012d576e7a38573964
SHA512 3c52a998506c889ceceb0396ff84b430745af505498508a61d5db4ef5cc15ac0885e6e837e2260218e7f9d63c63ccf8e1e10f1f92b3d87d80c52ec79c99c1736
SSDEEP 6144:3dks3RUhfUSQSg/n+VzMGdaeGv1BKtmIVDRnd5HeR0KEdI10mMKtbz:3thU93Den+VzMGorKtLvnd5HJCSmMO3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

46160

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterW EnumSystemCodePagesW LocalSize GetVolumeNameForVolumeMountPointA WriteConsoleInputW EnumDateFormatsW FindNextFileA CopyFileExA BuildCommDCBAndTimeoutsA VerifyVersionInfoA VirtualLock SetVolumeLabelW UnlockFile GetProfileSectionA VerifyVersionInfoW RequestWakeupLatency GetProcessPriorityBoost GlobalGetAtomNameW DeleteFileW FindNextVolumeMountPointA TlsSetValue LoadResource WriteConsoleInputA GetConsoleTitleW GetComputerNameExW OpenEventW GetModuleHandleA GetSystemDirectoryW GetDriveTypeW GetShortPathNameW ReleaseActCtx GetCommandLineW InterlockedExchange CopyFileA CreateActCtxW FormatMessageW GetModuleFileNameW EnterCriticalSection FindNextVolumeA GetQueuedCompletionStatus GetExitCodeThread LoadLibraryA CreateNamedPipeA GetUserDefaultLCID GetConsoleAliasesLengthW WriteProfileSectionA AddAtomA InterlockedDecrement HeapSize _hread InterlockedExchangeAdd GetStartupInfoA CreateMailslotW GetCPInfoExA GetSystemWow64DirectoryW SetLastError GetPrivateProfileIntA DebugBreak EndUpdateResourceA GetTickCount OpenFileMappingA GetDefaultCommConfigA VirtualAlloc TerminateThread GetACP GetDiskFreeSpaceExW DefineDosDeviceW TerminateProcess EnumResourceLanguagesW GetConsoleAliasExesLengthW SetConsoleTextAttribute GlobalGetAtomNameA IsProcessInJob MoveFileA lstrcpynA WriteConsoleW GetProcAddress lstrcatA WriteConsoleOutputA SetHandleInformation GetPrivateProfileStringA GetComputerNameW CreatePipe WritePrivateProfileSectionA WritePrivateProfileStructW GetPrivateProfileSectionNamesW GetDriveTypeA FileTimeToSystemTime GetComputerNameExA GlobalMemoryStatus SetTapeParameters lstrcmpW ResetEvent MoveFileW FreeLibrary GetCommState EnumDateFormatsA SetVolumeMountPointA GetOverlappedResult GlobalAlloc SetThreadPriorityBoost SetFileShortNameW lstrcpyW HeapWalk GetFileAttributesA SetCalendarInfoA SetComputerNameA GetConsoleAliasesA EnumDateFormatsExW GetTimeZoneInformation GetConsoleOutputCP MoveFileWithProgressA GetStdHandle GetLocalTime GetStringTypeW EnumSystemLocalesA FindActCtxSectionStringA OpenSemaphoreW GetModuleHandleExA LoadLibraryW DeleteFiber GetSystemWindowsDirectoryA SetFileTime GetFileType GetNamedPipeHandleStateA UnhandledExceptionFilter SetProcessShutdownParameters lstrcpynW GlobalUnWire GetCompressedFileSizeA GetFullPathNameA ReadConsoleW MapUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectA CreateFileW DeleteTimerQueueTimer GetFileInformationByHandle GetCPInfoExW OpenMutexA GetLastError DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent CloseHandle SetStdHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode InterlockedIncrement GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA OutputDebugStringW FlushFileBuffers WriteConsoleA MultiByteToWideChar SetFilePointer GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA CreateFileA ReadFile

user32

GetComboBoxInfo CharUpperA

gdi32

GetCharWidth32A

winhttp

WinHttpReadData

Sharing