1c1bbac4bfe1864619b6bc98c8e841ec[.]exe

General

Target
1c1bbac4bfe1864619b6bc98c8e841ec.exe
Size 131KB
Sample220828-dy66psbfhl
SHA256 6013a5fa7bb3261df7610b42485b5b4ae86dc04b7474206feec4c776b73eb9b3
MD5 1c1bbac4bfe1864619b6bc98c8e841ec
SHA1 1cd70f523f2e0efc739978248e361659fd2009d4
SHA512 4d5ae45233fa3925e40e6e11523e7dca2f0807502bf824d13c88423bb6e9f4290a593201081435305e3ef2cfd41a5d53bfbccb9c6e3b21ddf6b5d1180d4ffa28
SSDEEP 3072:dLGrXmkbOO3KNyBWE8tFt8gW8CveQOV5qRx:mXmkboyIEwFthW81QOV5qR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1c1bbac4bfe1864619b6bc98c8e841ec.exe

.exe 131KB

1c1bbac4bfe1864619b6bc98c8e841ec.exe

IMPHASH e22863cb63d0224cd72541b016319876
SHA256 6013a5fa7bb3261df7610b42485b5b4ae86dc04b7474206feec4c776b73eb9b3
MD5 1c1bbac4bfe1864619b6bc98c8e841ec
SHA1 1cd70f523f2e0efc739978248e361659fd2009d4
SHA512 4d5ae45233fa3925e40e6e11523e7dca2f0807502bf824d13c88423bb6e9f4290a593201081435305e3ef2cfd41a5d53bfbccb9c6e3b21ddf6b5d1180d4ffa28
SSDEEP 3072:dLGrXmkbOO3KNyBWE8tFt8gW8CveQOV5qRx:mXmkboyIEwFthW81QOV5qR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15554

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FoldStringA InterlockedIncrement SetWaitableTimer WaitNamedPipeA BuildCommDCBW GetSystemTimeAdjustment ReadConsoleInputA CreateFileW SearchPathA EnumResourceTypesW GetCPInfoExA ExpandEnvironmentStringsW GetModuleFileNameW BeginUpdateResourceW GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA WriteConsoleW DeleteFileW LocalAlloc GetProcAddress GetModuleHandleW AddRefActCtx GetConsoleAliasA GetSystemWindowsDirectoryW FindFirstChangeNotificationA GlobalAddAtomA WritePrivateProfileStringW EnumResourceNamesA SearchPathW lstrcpynA FindFirstFileExA GetVolumeInformationA GetCurrentDirectoryA GetConsoleAliasesLengthW AllocConsole GetConsoleTitleW SetCommMask SetPriorityClass OpenJobObjectW _lclose CreateDirectoryExW FillConsoleOutputCharacterW HeapReAlloc HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection EnterCriticalSection LoadLibraryW HeapFree Sleep RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapSize IsProcessorFeaturePresent

advapi32

BackupEventLogW CloseEventLog DeregisterEventSource BackupEventLogA GetNumberOfEventLogRecords GetEventLogInformation

winhttp

WinHttpOpen

Sharing