5f58a9c7355a91941e3057a3394fdabd[.]exe

General

Target
5f58a9c7355a91941e3057a3394fdabd.exe
Size 400KB
Sample220730-qphszabcd7
SHA256 936d6340619e30beddb907007f66638ee13bd932c5799c73261d79f024b74191
MD5 5f58a9c7355a91941e3057a3394fdabd
SHA1 7640b4c319f88c730087ca9674ec1d4a7057439f
SHA512 1726bb3489f26a807a4417f45366178b3f5c25d48c0aadbc5e2fb5b5e3c994511f85e5c1697451c5efda6afccb12acc452511756b6a59c4873f1751a7af097c0
SSDEEP 6144:On4ihRIp8TGnn/dwL7aQiz2zh/d3XpRUhd2QBYJqta6endDD:KReeGnn/dwL7g2Vl3kdrtabd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5f58a9c7355a91941e3057a3394fdabd.exe

.exe 400KB

5f58a9c7355a91941e3057a3394fdabd.exe

IMPHASH dc0513b2e8e866ceee30009dd51093dc
SHA256 936d6340619e30beddb907007f66638ee13bd932c5799c73261d79f024b74191
MD5 5f58a9c7355a91941e3057a3394fdabd
SHA1 7640b4c319f88c730087ca9674ec1d4a7057439f
SHA512 1726bb3489f26a807a4417f45366178b3f5c25d48c0aadbc5e2fb5b5e3c994511f85e5c1697451c5efda6afccb12acc452511756b6a59c4873f1751a7af097c0
SSDEEP 6144:On4ihRIp8TGnn/dwL7aQiz2zh/d3XpRUhd2QBYJqta6endDD:KReeGnn/dwL7g2Vl3kdrtabd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45744

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerifyVersionInfoW WriteConsoleInputA EnumDateFormatsW CopyFileExW DnsHostnameToComputerNameW FindNextFileW ReadConsoleOutputCharacterW SetConsoleActiveScreenBuffer LockFile GetProfileSectionA QueryDosDeviceW RequestWakeupLatency GetProcessPriorityBoost GetDriveTypeW GlobalGetAtomNameA DeleteFileW FindNextVolumeMountPointW TlsSetValue SizeofResource WriteConsoleInputW GetConsoleTitleW GetComputerNameExW OpenEventA CallNamedPipeA GetModuleHandleW GetSystemDirectoryA GetDriveTypeA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GetShortPathNameA DeleteFileA GetCommandLineW InterlockedIncrement InterlockedExchange CopyFileW CreateActCtxW FormatMessageW EnterCriticalSection FindNextVolumeA CreateIoCompletionPort LoadLibraryA CreateNamedPipeW GetSystemDefaultLangID GetConsoleAliasesLengthA WriteProfileSectionW AddAtomW InterlockedDecrement HeapFree _hwrite InterlockedCompareExchange GetStartupInfoW CreateMailslotW GetCPInfoExW GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntW GetConsoleAliasExesLengthW WaitForDebugEvent SetLastError LoadLibraryW VerifyVersionInfoA VirtualAlloc GetACP lstrcpyA GetConsoleAliasA GetDiskFreeSpaceExA TerminateProcess EnumResourceLanguagesA SetConsoleTextAttribute GlobalGetAtomNameW CreateJobSet MoveFileW lstrcpynA EnumSystemLocalesA GetPrivateProfileSectionNamesW GetFileAttributesW FileTimeToSystemTime GetTapeParameters lstrcmpW SetEvent MoveFileA CreateMutexA FindResourceW GetCommState FormatMessageA CreateFiber GetConsoleFontSize LocalAlloc SetFileShortNameA lstrcpyW HeapLock GetFileAttributesA SetCalendarInfoW GetSystemWindowsDirectoryW GetConsoleAliasesW EnumDateFormatsExW GetComputerNameW GetPrivateProfileStructW _hread LocalFlags OpenWaitableTimerA EnumResourceNamesW CreateFileMappingW SetProcessShutdownParameters lstrcpynW GetFullPathNameW WriteConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectW CreateFileW SetCurrentDirectoryA GlobalWire GetFileInformationByHandle GetProfileSectionW CommConfigDialogW CreateFileA GetDefaultCommConfigA LocalFree Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind WideCharToMultiByte GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetFilePointer QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle

user32

CharToOemBuffW CharUpperW GetMessageTime LoadMenuA

advapi32

AbortSystemShutdownW

Name

.text

Size

198KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

172KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rejufav

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sun

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xuref

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5f58a9c7355a91941e3057a3394fdabd.exe

kernel32

user32

advapi32