38bf27da889eb6f5560a977250b6a53e[.]exe

General

Target
38bf27da889eb6f5560a977250b6a53e.exe
Size 146KB
Sample221001-ee283sgdfk
SHA256 f38373f9c3c54424c6d6f8d045eb7d60d5f53d16b9ea0cee762c6a51e8a919ec
MD5 38bf27da889eb6f5560a977250b6a53e
SHA1 fa5f5f3de41877db6f471c49e9b26c6aa3bee09d
SHA512 6fa84bd85564db1fe42a70836b6e2c55c15f9ff222b661cbf89eb49780e3a6da15f35c36f8fcbca606106afdc84e2cae4f844e3de5896f1b65aee1b73b3a0ef8
SSDEEP 3072:xDgU1n0wdIPRJn8ruh25L42ohFhgTXnaFODqRMMJ:+wdUn8K+03nhgTXnkOiJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

38bf27da889eb6f5560a977250b6a53e.exe

.exe 146KB

38bf27da889eb6f5560a977250b6a53e.exe

IMPHASH 473b03041c4e4afe59409cd9fd4d6e22
SHA256 f38373f9c3c54424c6d6f8d045eb7d60d5f53d16b9ea0cee762c6a51e8a919ec
MD5 38bf27da889eb6f5560a977250b6a53e
SHA1 fa5f5f3de41877db6f471c49e9b26c6aa3bee09d
SHA512 6fa84bd85564db1fe42a70836b6e2c55c15f9ff222b661cbf89eb49780e3a6da15f35c36f8fcbca606106afdc84e2cae4f844e3de5896f1b65aee1b73b3a0ef8
SSDEEP 3072:xDgU1n0wdIPRJn8ruh25L42ohFhgTXnaFODqRMMJ:+wdUn8K+03nhgTXnkOiJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14279

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedPushEntrySList OpenFileMappingA GetProfileIntW ReadFile ReadConsoleW GetVolumeInformationW GetComputerNameW LocalShrink InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeW FindCloseChangeNotification CopyFileExW MoveFileWithProgressW GetProfileSectionA VerifyVersionInfoW LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceExW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA GetFileTime SetConsoleScreenBufferSize GetPrivateProfileStructA GetCPInfo PostQueuedCompletionStatus GlobalFindAtomA TerminateJobObject lstrcpynA WriteConsoleW GetBinaryTypeA GetLastError GetCommandLineA InterlockedIncrement VerifyVersionInfoA CreateActCtxW FormatMessageW GetConsoleAliasA GetModuleHandleA LoadLibraryW LeaveCriticalSection EnumSystemLocalesA GetStringTypeExW OpenMutexW SearchPathA FindResourceW GetSystemTimeAdjustment GetOverlappedResult GetPrivateProfileStructW DeleteFiber EnumDateFormatsW InterlockedCompareExchange FindActCtxSectionStringA GetNamedPipeHandleStateW RegisterWaitForSingleObject GlobalAlloc QueryMemoryResourceNotification SetLastError GetProcessPriorityBoost SetMailslotInfo SetFilePointer GetConsoleMode LCMapStringW Sleep ExitProcess DeleteFileA GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage HeapSize RtlUnwind GetLocaleInfoA HeapAlloc VirtualAlloc HeapReAlloc GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

CharUpperW

winhttp

WinHttpQueryOption

Sharing