e0e1e153eb9ca7517abb70db40014865[.]exe

General

Target
e0e1e153eb9ca7517abb70db40014865.exe
Size 395KB
Sample220729-r1vscaaea4
SHA256 06f6e14ab8cb8aaacf503675746bf2187bcf967538c9519786a6f2b2ff726b5e
MD5 e0e1e153eb9ca7517abb70db40014865
SHA1 e4550c111d32db28d8d0c6669245fab457abd187
SHA512 c40e7d743dd1d44e81e77a28fb521acc40f6ae0137116fe8bfaf53f0ac31933eb784de4ca2476fcecface403833b82218bde02887854cb222c0107e05a1a6271
SSDEEP 12288:Fvpg6ZPm1iJX7JwNjAVkpsl4Qagml+5KhrM:RpPm0Etl
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

e0e1e153eb9ca7517abb70db40014865.exe

.exe 395KB

e0e1e153eb9ca7517abb70db40014865.exe

IMPHASH 32bc75974f3053a5fe9480779f0f9800
SHA256 06f6e14ab8cb8aaacf503675746bf2187bcf967538c9519786a6f2b2ff726b5e
MD5 e0e1e153eb9ca7517abb70db40014865
SHA1 e4550c111d32db28d8d0c6669245fab457abd187
SHA512 c40e7d743dd1d44e81e77a28fb521acc40f6ae0137116fe8bfaf53f0ac31933eb784de4ca2476fcecface403833b82218bde02887854cb222c0107e05a1a6271
SSDEEP 12288:Fvpg6ZPm1iJX7JwNjAVkpsl4Qagml+5KhrM:RpPm0Etl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43536

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerifyVersionInfoW WriteConsoleInputA EnumDateFormatsW CopyFileExW DnsHostnameToComputerNameW FindNextFileW ReadConsoleOutputCharacterW VirtualUnlock LockFile GetProfileSectionW QueryDosDeviceW RequestWakeupLatency GetProcessPriorityBoost GlobalGetAtomNameA DeleteFileW FindNextVolumeMountPointA TlsSetValue SizeofResource WriteConsoleInputW GetConsoleTitleA GetComputerNameExW OpenEventW CallNamedPipeA GetModuleHandleA GetSystemDirectoryW GetDriveTypeA BuildCommDCBAndTimeoutsA GetProcAddress GetShortPathNameA DeleteFileA GetCommandLineW InterlockedIncrement GetConsoleTitleW CopyFileW CreateActCtxW FormatMessageA GetModuleHandleW EnterCriticalSection FindNextVolumeA CreateIoCompletionPort LoadLibraryA CreateNamedPipeA GetSystemDefaultLangID GetConsoleAliasesLengthW WriteProfileSectionW AddAtomW InterlockedDecrement HeapFree _hread InterlockedCompareExchange GetStartupInfoW CreateMailslotW VerifyVersionInfoA GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntW GetConsoleAliasExesLengthW WaitForDebugEvent SetLastError LoadLibraryW FreeLibraryAndExitThread FindResourceA GetCommState CreateFiber GetConsoleFontSize GetDefaultCommConfigA VirtualAlloc GetACP lstrcatW GetConsoleAliasA GetDiskFreeSpaceExA TerminateProcess EnumResourceLanguagesA SetConsoleTextAttribute CreateJobSet MoveFileW LocalAlloc SetFileShortNameW lstrcpyW HeapLock GetFileAttributesA SetCalendarInfoW GetSystemWindowsDirectoryW SetComputerNameW GetConsoleAliasesW EnumDateFormatsExW GetPrivateProfileStructW LocalFlags CreateFileMappingA SetProcessShutdownParameters lstrcpynW GlobalWire GetFullPathNameA WriteConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectW CreateFileA SetCurrentDirectoryA GetFileInformationByHandle CommConfigDialogW GetCPInfoExW LocalFree WideCharToMultiByte RaiseException GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsAlloc GetCurrentThreadId TlsFree SetFilePointer QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP CloseHandle

user32

CharUpperW GetMessageTime LoadMenuW

advapi32

InitiateSystemShutdownW

Name

.text

Size

197KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

167KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rop

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vuhe

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tupezuz

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e0e1e153eb9ca7517abb70db40014865.exe

kernel32

user32

advapi32