11f04b754859273d8ab885e7df6f63ce[.]exe

General

Target
11f04b754859273d8ab885e7df6f63ce.exe
Size 279KB
Sample220923-g134lsdch7
SHA256 a025e5d7e568657b8c933e2d47c333f3710ed321fe7adb52325fa8eb0e21b24b
MD5 11f04b754859273d8ab885e7df6f63ce
SHA1 f6927dbbd63937aa68f0c2b7ce48e8c6762e1130
SHA512 7c8dd2a0d18f96b8c79a2dad505b58b7d987d8d16a85dd82b48529e019ef33b07fcd8f3ab91d4e90a7e80ead84d1ef85e38d8a0fea3beaf64b04be2677d83f09
SSDEEP 6144:Giy2kVDvLiAa1+mNArzGftBMfikmq0HigavwVfgD:GiyzjG1+mNAraft0cCT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

11f04b754859273d8ab885e7df6f63ce.exe

.exe 279KB

11f04b754859273d8ab885e7df6f63ce.exe

IMPHASH 39a7bd09944556ce33f77dab9a3687d7
SHA256 a025e5d7e568657b8c933e2d47c333f3710ed321fe7adb52325fa8eb0e21b24b
MD5 11f04b754859273d8ab885e7df6f63ce
SHA1 f6927dbbd63937aa68f0c2b7ce48e8c6762e1130
SHA512 7c8dd2a0d18f96b8c79a2dad505b58b7d987d8d16a85dd82b48529e019ef33b07fcd8f3ab91d4e90a7e80ead84d1ef85e38d8a0fea3beaf64b04be2677d83f09
SSDEEP 6144:Giy2kVDvLiAa1+mNArzGftBMfikmq0HigavwVfgD:GiyzjG1+mNAraft0cCT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37987

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeW CommConfigDialogW GetSystemTimeAdjustment FindNextFileA EnumResourceTypesW GetModuleFileNameW UpdateResourceA LoadLibraryW DeleteFileA CopyFileW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringA PeekConsoleInputA GetProcAddress FindFirstChangeNotificationW WritePrivateProfileStringA EnumResourceNamesW GetFileType CommConfigDialogA lstrcpynA AddAtomA SetConsoleCtrlHandler GetLongPathNameA GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameW GetVolumeNameForVolumeMountPointA GetFileSize GetFileAttributesExW SetComputerNameW GetFileAttributesA ReadConsoleA GetVolumePathNameA FindNextFileW OpenJobObjectA InitializeCriticalSection GlobalWire GetComputerNameW GetVersionExA GlobalGetAtomNameW LoadLibraryA HeapAlloc MultiByteToWideChar RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRegisterMallocSpy

msimg32

TransparentBlt

Sharing