73cda9ae7da8c31ba6bd2f056a1646ad[.]exe

General

Target
73cda9ae7da8c31ba6bd2f056a1646ad.exe
Size 400KB
Sample220831-vcs6dsagh3
SHA256 9df9fedac09a927e5cb60bcdca9495e6402b8c0328ad0037b7e3c3c63150dfdd
MD5 73cda9ae7da8c31ba6bd2f056a1646ad
SHA1 a5447b948ed9b15cd9cc76894e976630c122c23e
SHA512 a7aab56c2e27270246d19cc5ea35122516f122c79cebe68109adc5d3342ee55c87111e55c934a58d066314924fa55fb4586448428bfadd6ee24a89f945f40272
SSDEEP 12288:iL8brvbXOD2zhhQ58QA34Vggsp6bV2rB5V:C2fXOq1h/QFVMp6bV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

73cda9ae7da8c31ba6bd2f056a1646ad.exe

.exe 400KB

73cda9ae7da8c31ba6bd2f056a1646ad.exe

IMPHASH 57823e464d761fd97a4d1bba81be6080
SHA256 9df9fedac09a927e5cb60bcdca9495e6402b8c0328ad0037b7e3c3c63150dfdd
MD5 73cda9ae7da8c31ba6bd2f056a1646ad
SHA1 a5447b948ed9b15cd9cc76894e976630c122c23e
SHA512 a7aab56c2e27270246d19cc5ea35122516f122c79cebe68109adc5d3342ee55c87111e55c934a58d066314924fa55fb4586448428bfadd6ee24a89f945f40272
SSDEEP 12288:iL8brvbXOD2zhhQ58QA34Vggsp6bV2rB5V:C2fXOq1h/QFVMp6bV
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

44592

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

QueryDosDeviceA LocalFree SetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceA GetComputerNameExW GetModuleHandleA GetTempPathA BuildCommDCBAndTimeoutsW GetProcAddress VirtualProtect _lwrite UnlockFile GetPrivateProfileStructA GetDiskFreeSpaceExW DefineDosDeviceA SetVolumeMountPointW GetAtomNameA FlushConsoleInputBuffer EnumResourceLanguagesA GetCPInfoExW GetThreadContext lstrlenW GetProcessAffinityMask SetConsoleCtrlHandler CreateJobSet CopyFileW lstrcpynA WriteConsoleA GetCommandLineA GetLastError GetCommandLineW InterlockedIncrement FormatMessageW CreateJobObjectW InitializeCriticalSection FindNextVolumeA SetConsoleCursorInfo LoadLibraryW WriteProfileSectionW VerifyVersionInfoA InterlockedDecrement LoadLibraryA FoldStringA GetProfileSectionW GetDefaultCommConfigW GetConsoleAliasesLengthW lstrcpyA TerminateThread HeapFree SetCriticalSectionSpinCount GetComputerNameA EnumSystemLocalesW DisableThreadLibraryCalls OpenMutexA LocalFileTimeToFileTime SearchPathA SetProcessShutdownParameters CreateMutexA FormatMessageA InterlockedCompareExchange EnumDateFormatsW GetConsoleScreenBufferInfo LocalAlloc SetFileShortNameA EnumCalendarInfoExW GetFileAttributesA GetSystemWindowsDirectoryA GetAtomNameW ReadConsoleInputA EnumDateFormatsA _hwrite GetConsoleAliasA GetQueuedCompletionStatus lstrcatW GetDefaultCommConfigA GetFullPathNameW DebugBreakProcess AddAtomA SetCurrentDirectoryW SetCalendarInfoW GetProfileSectionA FindNextFileA SetHandleCount MoveFileWithProgressW ReadConsoleOutputCharacterW CopyFileExW AddAtomW GetModuleHandleW Sleep ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter MoveFileA DeleteFileA RaiseException GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetModuleFileNameA WriteFile GetStdHandle GetACP GetOEMCP GetCPInfo IsValidCodePage TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetFileType HeapDestroy HeapCreate VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointer CloseHandle SetStdHandle GetConsoleOutputCP CreateFileA

gdi32

GetCharWidth32A GetBoundsRect GetCharWidthW SelectObject

advapi32

RevertToSelf

Sharing