Wed191029a419a6[.]exe

General

Target
Wed191029a419a6.exe
Size 608KB
Sample220723-c2fbqabfen
SHA256 0f3752cdf6653a331205269e6bd6ca4e265247847eed5be677bf758f29235d08
MD5 ef35dc59b9fa276abf18124fe027d531
SHA1 da30b182d738ba13522a47dcacafde6c95fd4c81
SHA512 77e99b97dd775271a4dd650653cf25d518dea3ce0583791357d549b69ae55d2771b59c7b7759e4527693544a301e88e6666ab6c750aa8302cabac7ac1b2b0190
SSDEEP 12288:a1WQx7flEHm6JvlwfEttnh3XbyQqdPrl2mQmJWW/1duNeduiafb4:H6flGyfEbBLq5h2JkWWddugduiaj4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

Wed191029a419a6.exe

.exe 608KB

Wed191029a419a6.exe

IMPHASH f6ee633166e72a1d10f4f54440093ac0
SHA256 0f3752cdf6653a331205269e6bd6ca4e265247847eed5be677bf758f29235d08
MD5 ef35dc59b9fa276abf18124fe027d531
SHA1 da30b182d738ba13522a47dcacafde6c95fd4c81
SHA512 77e99b97dd775271a4dd650653cf25d518dea3ce0583791357d549b69ae55d2771b59c7b7759e4527693544a301e88e6666ab6c750aa8302cabac7ac1b2b0190
SSDEEP 12288:a1WQx7flEHm6JvlwfEttnh3XbyQqdPrl2mQmJWW/1duNeduiafb4:H6flGyfEbBLq5h2JkWWddugduiaj4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

7888

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetThreadContext FileTimeToDosDateTime EnumResourceNamesW SetPriorityClass GetNativeSystemInfo lstrlenA GetConsoleAliasesLengthW CopyFileExW TlsGetValue GetDriveTypeW SetEndOfFile InterlockedIncrement GetCommState InterlockedDecrement GetSystemWindowsDirectoryW GetNamedPipeHandleStateA WaitForSingleObject SetEvent FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetSystemTimeAsFileTime GetPrivateProfileStringW WriteFile FindResourceExA GetPrivateProfileIntA LoadLibraryW GetConsoleMode CopyFileW SetConsoleMode SetConsoleCursorPosition IsDBCSLeadByte GetOverlappedResult GetStartupInfoW GlobalUnlock LCMapStringA GetFileSizeEx GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc OpenMutexA LocalAlloc IsSystemResumeAutomatic SetCurrentDirectoryW WriteProfileSectionW HeapWalk FindAtomA Process32NextW CreateIoCompletionPort FindFirstChangeNotificationA FreeEnvironmentStringsW FatalAppExitA GetCurrentThreadId SetThreadAffinityMask OpenSemaphoreW DeleteFileW ReadConsoleOutputCharacterW GetSystemTime CreateFileA MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr RaiseException Sleep ExitProcess TlsAlloc TlsSetValue TlsFree EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage SetHandleCount GetStdHandle GetFileType QueryPerformanceCounter GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpReadData

Sharing