f2ad29e4ebad84187771edddc8509276[.]exe

General

Target
f2ad29e4ebad84187771edddc8509276.exe
Size 419KB
Sample220827-axyamabfek
SHA256 084e32c21629bd6aeef802a1cad1dcf3efb64cc839c5cdaad3265347124abf2b
MD5 f2ad29e4ebad84187771edddc8509276
SHA1 e7c01a54c020d887a95fc5cbd3be81e9ef956dd2
SHA512 1fd3a01f4b95e21172327ad8d3283f50f9e239b2d272236ca76aead581fe4ce9dd5dfeaa8340b9070ada141b0cf86e40ee9cbd1facaff2a9862514d39a291152
SSDEEP 12288:CjajonoBs5agXhCTcguANeTPADd+r9Y+s2DF8NLO:WpSRgkJeTPAp+riSDiNLO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f2ad29e4ebad84187771edddc8509276.exe

.exe 419KB

f2ad29e4ebad84187771edddc8509276.exe

IMPHASH ecaab4efd3ae530e0a40beac8c8852a7
SHA256 084e32c21629bd6aeef802a1cad1dcf3efb64cc839c5cdaad3265347124abf2b
MD5 f2ad29e4ebad84187771edddc8509276
SHA1 e7c01a54c020d887a95fc5cbd3be81e9ef956dd2
SHA512 1fd3a01f4b95e21172327ad8d3283f50f9e239b2d272236ca76aead581fe4ce9dd5dfeaa8340b9070ada141b0cf86e40ee9cbd1facaff2a9862514d39a291152
SSDEEP 12288:CjajonoBs5agXhCTcguANeTPADd+r9Y+s2DF8NLO:WpSRgkJeTPAp+riSDiNLO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44096

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

QueryDosDeviceA LocalFree SetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceW GetComputerNameExW GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress VirtualAlloc OpenJobObjectW _lread GetDiskFreeSpaceExW GlobalGetAtomNameA WriteConsoleW GetLastError GetCommandLineA InterlockedIncrement CreateJobObjectA InitializeCriticalSection GetConsoleFontSize FindNextVolumeW CreateIoCompletionPort SetConsoleCursorInfo LoadLibraryW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA InterlockedDecrement LoadLibraryA FoldStringW GetProfileSectionW GetDefaultCommConfigA GetConsoleAliasesLengthA lstrcpyW VerifyVersionInfoA CopyFileExA SetCriticalSectionSpinCount GetComputerNameA EnumSystemLocalesW FreeLibrary OpenMutexA FileTimeToLocalFileTime SearchPathW FindNextFileA WaitForSingleObject CreateMutexA FindResourceA FormatMessageW InterlockedCompareExchange EnumDateFormatsA GetConsoleScreenBufferInfo LocalAlloc EnumDateFormatsExW ZombifyActCtx GetFileInformationByHandle GetFileAttributesA GetSystemWindowsDirectoryW GetAtomNameA ReadConsoleInputW GetPrivateProfileStructA _hwrite GetConsoleAliasA GetFullPathNameA DebugBreakProcess SetCurrentDirectoryW SetCalendarInfoA EnumCalendarInfoExA CreateFileA GetConsoleOutputCP GetProfileSectionA GetLogicalDrives FlushConsoleInputBuffer TerminateThread ReadConsoleOutputCharacterW FindNextFileW SetHandleInformation WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter MoveFileA DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA

user32

LoadMenuA CharToOemBuffW CharUpperW GetMenuInfo

gdi32

GetBoundsRect SelectObject GetCharWidthW GetCharWidth32A

advapi32

RevertToSelf

Sharing