b48bec1475c20a3add16b3f1a7c14fb3[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b48bec1475c20a3add16b3f1a7c14fb3.exe
Size 291KB
Sample220918-c3kmtsafa8
SHA256 cced13549d1dc6d9e54b540e834073a279a413257d5609ab7223aab9845897d1
MD5 b48bec1475c20a3add16b3f1a7c14fb3
SHA1 1b3cd8a20d4b5e2dbac7cde25b2b56da751f467b
SHA512 dcc10fdad011b45b29240d406b409182864cffafe6fc7a0c8f2dcb5424db49a1f3604c3cce990c14363110e58cd4b7fbf864922f3f3e20d2097819a608763756
SSDEEP 6144:B9fL5h2Kk0OOJbuTlTV97C0/HB6NnigabwVf:B9fth2Kk0OiKf/ei
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b48bec1475c20a3add16b3f1a7c14fb3.exe

.exe 291KB

b48bec1475c20a3add16b3f1a7c14fb3.exe

IMPHASH 75d112a417a21f39fc1b1ceff903e344
SHA256 cced13549d1dc6d9e54b540e834073a279a413257d5609ab7223aab9845897d1
MD5 b48bec1475c20a3add16b3f1a7c14fb3
SHA1 1b3cd8a20d4b5e2dbac7cde25b2b56da751f467b
SHA512 dcc10fdad011b45b29240d406b409182864cffafe6fc7a0c8f2dcb5424db49a1f3604c3cce990c14363110e58cd4b7fbf864922f3f3e20d2097819a608763756
SSDEEP 6144:B9fL5h2Kk0OOJbuTlTV97C0/HB6NnigabwVf:B9fth2Kk0OiKf/ei
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31679

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedExchangeAdd OpenWaitableTimerA CreateEventW ReadConsoleInputW WaitNamedPipeW CommConfigDialogA SetSystemTimeAdjustment FindNextFileA EnumResourceTypesW GetModuleFileNameA UpdateResourceA LoadLibraryW DeleteFileA CopyFileA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasW PeekConsoleInputW GlobalGetAtomNameA GetShortPathNameA GetPrivateProfileStringW LocalAlloc GetProcAddress GetConsoleAliasA FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesW LockFile CommConfigDialogW lstrcpynA AddAtomW AllocConsole GetLongPathNameW GetProcessHandleCount GetLastError GetSystemDefaultLCID GetSystemDefaultLangID OpenJobObjectW EnterCriticalSection FindResourceExA _hwrite GlobalWire GetComputerNameA GetVersionExA SetFileShortNameA GetVolumeNameForVolumeMountPointA GetFileSizeEx GetFileAttributesExA SetComputerNameW GetFileAttributesW GetVolumePathNameA FoldStringW GetModuleHandleA ReleaseActCtx LoadLibraryA CreateFileA CloseHandle RtlUnwind MultiByteToWideChar GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize

user32

ScreenToClient

gdi32

GetCharacterPlacementW

advapi32

CloseEventLog

msimg32

AlphaBlend