9fae1c2fb440f524912b0a4b6d290b6f[.]exe

General

Target
9fae1c2fb440f524912b0a4b6d290b6f.exe
Size 295KB
Sample220911-hkshlsbbc8
SHA256 570c8bfbfe83183e8cf87d989d2a0bee76da03f0db2061578629d3939a4a42f7
MD5 9fae1c2fb440f524912b0a4b6d290b6f
SHA1 5302136017c727f55609384260af62a59e9554ab
SHA512 087ea234731dcb9b422b8003777e77d698df23cba9a9f3f36d98abc225b3cff87029ad43ee27bf7e40576d3e666191d6b3529b68fcf8bca552123370bc2a1e66
SSDEEP 6144:c2hOl5gX/tpIgrl7fovM/BNUISIncK/t3Amb3TlPGYgkZjdXW:c952/jIgZTyM/BuYcKZAmNRjVW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

9fae1c2fb440f524912b0a4b6d290b6f.exe

.exe 295KB

9fae1c2fb440f524912b0a4b6d290b6f.exe

IMPHASH 6a7332a7a9bede94c989862d1f10a2a3
SHA256 570c8bfbfe83183e8cf87d989d2a0bee76da03f0db2061578629d3939a4a42f7
MD5 9fae1c2fb440f524912b0a4b6d290b6f
SHA1 5302136017c727f55609384260af62a59e9554ab
SHA512 087ea234731dcb9b422b8003777e77d698df23cba9a9f3f36d98abc225b3cff87029ad43ee27bf7e40576d3e666191d6b3529b68fcf8bca552123370bc2a1e66
SSDEEP 6144:c2hOl5gX/tpIgrl7fovM/BNUISIncK/t3Amb3TlPGYgkZjdXW:c952/jIgZTyM/BuYcKZAmNRjVW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

70560

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressW DeleteAtom GetProfileSectionW VerifyVersionInfoW LocalFree SetProcessPriorityBoost VirtualProtect GlobalGetAtomNameA GetComputerNameExW FindResourceW GetComputerNameExA GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA ExitThread HeapReAlloc LeaveCriticalSection GetComputerNameW EnumSystemLocalesW GetVersion OpenMutexA LocalFileTimeToFileTime GetProcessShutdownParameters FormatMessageA InterlockedCompareExchange EnumDateFormatsA _lread UnlockFile GetPrivateProfileStructW GetDiskFreeSpaceExA DefineDosDeviceA SetVolumeMountPointW GetAtomNameA SetConsoleScreenBufferSize TerminateThread EnumResourceLanguagesA GetCPInfoExW SetThreadContext lstrlenW GetProcessAffinityMask ReadConsoleOutputCharacterA IsProcessInJob CopyFileA lstrcpynA WriteConsoleA GetLastError GetCommandLineW InterlockedExchangeAdd SearchPathW FormatMessageW CreateJobObjectA InitializeCriticalSection FindNextVolumeW GetCurrentConsoleFont GetConsoleAliasA AddAtomW InterlockedDecrement LoadLibraryA GetProfileSectionA GetDefaultCommConfigW SetLastError FoldStringA GlobalAlloc GetFileType GetNumberOfConsoleInputEvents lstrcpyW lstrcpyA GetFileAttributesA GetSystemWindowsDirectoryW GetAtomNameW ReadConsoleInputA GetPrivateProfileStructA _hread GetQueuedCompletionStatus lstrcatA GetFullPathNameA DebugSetProcessKillOnExit AddAtomA SetCurrentDirectoryW SetCalendarInfoW FindNextFileW CopyFileExW GenerateConsoleCtrlEvent InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind MoveFileA GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW OutputDebugStringW ExitProcess LoadLibraryW SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapSize VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetFilePointer SetStdHandle GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA DeleteFileA

user32

GetMessageTime

gdi32

SelectObject GetBoundsRect

Sharing