b1aa19f8163e0166e7d5445fe1c5a5d9[.]exe

General

Target
b1aa19f8163e0166e7d5445fe1c5a5d9.exe
Size 231KB
Sample220813-klen9afhak
SHA256 02744c7cedf617a32a3bb94eeec0dc15ca506faddba267341915403fe4b7f30a
MD5 b1aa19f8163e0166e7d5445fe1c5a5d9
SHA1 99f0077d7355d85bdddf45324764c20ce5c52c2f
SHA512 1f120fc9480b2b23cba9d96f8ebf39382d67ef2a97fa1bd4a374b48dbf21e028f963c2920ea78c8e72604dd9d8b40c893bc9a8a1c37740c4218f0f5068132c43
SSDEEP 3072:m3rB8q8wx6NstOOoo0DudCbR4nyLYGdm61pwCM/h3qpZa9uD6VdyhkEzRv4:EB8qMGD0mCN4nyLYwm6YCrwVfEz
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b1aa19f8163e0166e7d5445fe1c5a5d9.exe

.exe 231KB

b1aa19f8163e0166e7d5445fe1c5a5d9.exe

IMPHASH 5e403cdac392acc1b393833952ce6d8d
SHA256 02744c7cedf617a32a3bb94eeec0dc15ca506faddba267341915403fe4b7f30a
MD5 b1aa19f8163e0166e7d5445fe1c5a5d9
SHA1 99f0077d7355d85bdddf45324764c20ce5c52c2f
SHA512 1f120fc9480b2b23cba9d96f8ebf39382d67ef2a97fa1bd4a374b48dbf21e028f963c2920ea78c8e72604dd9d8b40c893bc9a8a1c37740c4218f0f5068132c43
SSDEEP 3072:m3rB8q8wx6NstOOoo0DudCbR4nyLYGdm61pwCM/h3qpZa9uD6VdyhkEzRv4:EB8qMGD0mCN4nyLYwm6YCrwVfEz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23975

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA FoldStringA InterlockedIncrement _hread CancelWaitableTimer WaitNamedPipeA BuildCommDCBA GetConsoleAliasExesLengthW PeekConsoleInputA CreateFileA RegisterWaitForSingleObject LoadLibraryA EnumResourceTypesA TransmitCommChar GetFirmwareEnvironmentVariableA GetModuleFileNameW BeginUpdateResourceA GetConsoleAliasExesLengthA WriteConsoleA LoadLibraryW WriteConsoleW DeleteFileW FillConsoleOutputCharacterW GetProcAddress GetSystemDefaultLCID GetConsoleAliasW FindFirstChangeNotificationA RemoveDirectoryW lstrcpynW FindFirstFileExA AreFileApisANSI GetCurrentDirectoryW GetConsoleAliasesLengthW SetConsoleTitleA GetBinaryTypeW GlobalAlloc FindNextFileA OpenJobObjectW HeapFree _lopen GetComputerNameW SetThreadLocale GetCurrentProcess TlsGetValue SetCalendarInfoW SetComputerNameA FoldStringW GetDiskFreeSpaceW RtlUnwind MultiByteToWideChar GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent GetLastError EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess HeapAlloc TlsAlloc TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle WriteFile FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer GetConsoleCP GetConsoleMode RaiseException LCMapStringW GetStringTypeW SetStdHandle FlushFileBuffers HeapReAlloc SetEndOfFile GetProcessHeap ReadFile HeapSize CreateFileW

user32

ClientToScreen

Sharing