893da535e267b71aef120c2f45aadae4[.]exe

General

Target
893da535e267b71aef120c2f45aadae4.exe
Size 395KB
Sample220720-ld7whadhg9
SHA256 21a608f6afe833f711e4f2f3e9f0ffe8fb8aa5262b49956d3a44c9d32fe22edd
MD5 893da535e267b71aef120c2f45aadae4
SHA1 8685adc95663ba5ed34768dc8a7c04bbe36c830f
SHA512 e83094a83f963970ba636b6565bcb2b10ffa3070dc62710b814892aa78e60beb531cfc21d325b27785aba96fcb8a9b632239a338a3dcc283ce38bf69236970d1
SSDEEP 6144:83+sMWCVRenfC605rjyslD+63dB6iKyi1xcxSf6n/YX5mTeSuTH8vMFFUZt:TUe0n6605Ss5x6E4cxSYs5mduTHcMFy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

893da535e267b71aef120c2f45aadae4.exe

.exe 395KB

893da535e267b71aef120c2f45aadae4.exe

IMPHASH 4936bd3bf59f423d7f275b9b0ddc252f
SHA256 21a608f6afe833f711e4f2f3e9f0ffe8fb8aa5262b49956d3a44c9d32fe22edd
MD5 893da535e267b71aef120c2f45aadae4
SHA1 8685adc95663ba5ed34768dc8a7c04bbe36c830f
SHA512 e83094a83f963970ba636b6565bcb2b10ffa3070dc62710b814892aa78e60beb531cfc21d325b27785aba96fcb8a9b632239a338a3dcc283ce38bf69236970d1
SSDEEP 6144:83+sMWCVRenfC605rjyslD+63dB6iKyi1xcxSf6n/YX5mTeSuTH8vMFFUZt:TUe0n6605Ss5x6E4cxSYs5mduTHcMFy
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41952

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA LocalSize WriteConsoleInputA EnumDateFormatsA FindNextFileW CopyFileExA DnsHostnameToComputerNameA VerifyVersionInfoA VirtualLock SetVolumeLabelW LockFile GetProfileSectionW RequestWakeupLatency GetProcessPriorityBoost GlobalGetAtomNameW DeleteFileA FindNextVolumeMountPointA TlsSetValue LoadResource GetConsoleTitleA GetComputerNameExW OpenEventA CallNamedPipeW GetModuleHandleA GetSystemDirectoryW GetDriveTypeA BuildCommDCBAndTimeoutsW GetShortPathNameW ReleaseActCtx GetCommandLineW InterlockedExchange CopyFileW CreateActCtxW FormatMessageW EnterCriticalSection FindNextVolumeA GetExitCodeThread LoadLibraryA CreateNamedPipeA GetSystemDefaultLCID GetConsoleAliasesLengthW WriteProfileSectionA AddAtomW InterlockedDecrement VerifyVersionInfoW HeapFree _hread InterlockedExchangeAdd GetStartupInfoA CreateMailslotW GetCPInfoExA GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntA GetConsoleAliasExesLengthW WaitForDebugEvent EndUpdateResourceA SetLastError ExitThread GetACP GetDiskFreeSpaceExW DefineDosDeviceW TerminateProcess EnumResourceLanguagesW GetCPInfoExW SetConsoleTextAttribute CreateIoCompletionPort lstrcpynW WriteConsoleA GetProcAddress lstrcatA ReadConsoleOutputA SetCriticalSectionSpinCount GetComputerNameW EnumSystemLocalesA WritePrivateProfileSectionA WritePrivateProfileStructW GetPrivateProfileSectionNamesW FileTimeToSystemTime GlobalMemoryStatus SetTapeParameters lstrcmpW SetEvent MoveFileA FreeLibrary GetCommState InterlockedCompareExchange GetConsoleFontSize GetOverlappedResult LocalAlloc SetThreadPriorityBoost SetFileShortNameW lstrcpyA HeapQueryInformation GetFileAttributesA SetCalendarInfoA GetConsoleTitleW SetComputerNameW GetConsoleAliasesA EnumDateFormatsExW SetTimeZoneInformation GetConsoleOutputCP GetStdHandle GetLocalTime GetStringTypeW FindActCtxSectionStringA FreeEnvironmentStringsA GetModuleHandleExW LoadLibraryW GetBinaryTypeA DeleteFiber GetSystemWindowsDirectoryA SetFileTime GetFileSize GetNamedPipeHandleStateA UnhandledExceptionFilter GetProcessShutdownParameters lstrcpynA GlobalWire GetCompressedFileSizeA GetFullPathNameA ReadConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterA OpenJobObjectA CreateFileW DeleteTimerQueueTimer SetCurrentDirectoryW FlushFileBuffers SetInformationJobObject GetNamedPipeHandleStateW CloseHandle RaiseException GetCommandLineA HeapValidate IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle CreateFileA

user32

GetMenuInfo LoadMenuW CharUpperW

gdi32

SelectObject

winhttp

WinHttpQueryOption

Sharing