11c5ca4f749a623e06d78da3a41ca2d2[.]exe

General

Target
11c5ca4f749a623e06d78da3a41ca2d2.exe
Size 394KB
Sample220831-bthw7sehgn
SHA256 fef5709bb12beac0aea8a1674d4f51d8928739ac3cc9e578d529fdd782288d13
MD5 11c5ca4f749a623e06d78da3a41ca2d2
SHA1 6f07406db722bb2a2033351f0d786dab08d593f6
SHA512 8480c5a88626cd4021af34263a5fc45e2eb459842cbbbc79a2564f6af7ea3462501e2d7ad9cb028bb71a72d42dbaaf88c3a20403910ba5653bf9feca8816d7a1
SSDEEP 6144:rJzHlxbaNrWKhSAR+B3slmb4OWHdzj2iYVdfOEAUrQKPXEa+iwQ1:NHHatd58B3slmb4OozSJVIEAVsXE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

11c5ca4f749a623e06d78da3a41ca2d2.exe

.exe 394KB

11c5ca4f749a623e06d78da3a41ca2d2.exe

IMPHASH ad15a3c1fc14e9481c18d9548b1641bf
SHA256 fef5709bb12beac0aea8a1674d4f51d8928739ac3cc9e578d529fdd782288d13
MD5 11c5ca4f749a623e06d78da3a41ca2d2
SHA1 6f07406db722bb2a2033351f0d786dab08d593f6
SHA512 8480c5a88626cd4021af34263a5fc45e2eb459842cbbbc79a2564f6af7ea3462501e2d7ad9cb028bb71a72d42dbaaf88c3a20403910ba5653bf9feca8816d7a1
SSDEEP 6144:rJzHlxbaNrWKhSAR+B3slmb4OWHdzj2iYVdfOEAUrQKPXEa+iwQ1:NHHatd58B3slmb4OozSJVIEAVsXE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44544

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

QueryDosDeviceA LocalFree SetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceA GetComputerNameExW GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress VirtualProtect OpenJobObjectW _lwrite UnlockFile GetPrivateProfileStructA GetDiskFreeSpaceExW DefineDosDeviceA SetVolumeMountPointW GetAtomNameA FlushConsoleInputBuffer EnumResourceLanguagesA GetCPInfoExW GetThreadContext lstrlenW GetProcessAffinityMask SetConsoleWindowInfo GlobalGetAtomNameA CreateJobSet CopyFileW lstrcpynA WriteConsoleW GetCommandLineA GetLastError GetCommandLineW InterlockedIncrement CreateJobObjectW InitializeCriticalSection GetConsoleFontSize FindNextVolumeW GlobalFlags VerifyVersionInfoA LoadLibraryW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA InterlockedDecrement LoadLibraryA FoldStringA GetDefaultCommConfigW GetConsoleAliasesLengthA lstrcpyA TerminateThread HeapSize SetCriticalSectionSpinCount GetComputerNameA EnumSystemLocalesW DisableThreadLibraryCalls OpenMutexA LocalFileTimeToFileTime SearchPathA SetProcessShutdownParameters CreateMutexA FormatMessageA InterlockedCompareExchange EnumDateFormatsW GetConsoleScreenBufferInfo LocalAlloc SetFileShortNameA EnumCalendarInfoExA GetFileAttributesA GetSystemWindowsDirectoryW GetAtomNameW ReadConsoleInputA EnumDateFormatsA _hwrite GetConsoleAliasA GetDefaultCommConfigA GetFullPathNameW DebugBreakProcess SetCurrentDirectoryW SetCalendarInfoW GetProfileSectionW FindNextFileA SetHandleCount MoveFileWithProgressW ReadConsoleOutputCharacterW CopyFileExA SetConsoleCursorInfo WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter MoveFileA DeleteFileA RaiseException GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapReAlloc VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

gdi32

GetCharWidth32A GetBoundsRect GetCharWidthW SelectObject

advapi32

RevertToSelf

Sharing