46a5bdc580590e0916dfc179678cd3f2[.]exe

General

Target
46a5bdc580590e0916dfc179678cd3f2.exe
Size 269KB
Sample221010-hzx2msbbdr
SHA256 a7d0be69ea1ec1ffa8cad31c8c69a626dab084aa6cad5515788defdb6294fbc0
MD5 46a5bdc580590e0916dfc179678cd3f2
SHA1 dccb99529830f2f3f2524e01f0819b0b7058447d
SHA512 99f61c68499602c4f53f436ee96df93e4d00eabcc58b29c7ab77d6824f56f6ab741d60dc306e5a92e104c8a53cb94bf3c2c97980caf8734834c2beca280ab2c6
SSDEEP 3072:GXhmH6O5Y5F13UmTW+45luLBk2r3/lM24I7KGAlBJfTWaXu6BM/h3qpZa9uD6Vdf:uAaO+5DW+jBk2D/VKjDqn6BrwVfquS0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

46a5bdc580590e0916dfc179678cd3f2.exe

.exe 269KB

46a5bdc580590e0916dfc179678cd3f2.exe

IMPHASH 2535d1f49520e74009fbe388b96c426c
SHA256 a7d0be69ea1ec1ffa8cad31c8c69a626dab084aa6cad5515788defdb6294fbc0
MD5 46a5bdc580590e0916dfc179678cd3f2
SHA1 dccb99529830f2f3f2524e01f0819b0b7058447d
SHA512 99f61c68499602c4f53f436ee96df93e4d00eabcc58b29c7ab77d6824f56f6ab741d60dc306e5a92e104c8a53cb94bf3c2c97980caf8734834c2beca280ab2c6
SSDEEP 3072:GXhmH6O5Y5F13UmTW+45luLBk2r3/lM24I7KGAlBJfTWaXu6BM/h3qpZa9uD6Vdf:uAaO+5DW+jBk2D/VKjDqn6BrwVfquS0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29520

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadHugeReadPtr SetEndOfFile GetConsoleAliasExesLengthA FindActCtxSectionGuid GetConsoleAliasA WaitNamedPipeA HeapFree SetComputerNameW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA GetTickCount EnumCalendarInfoExW ConvertFiberToThread FindResourceExA LoadLibraryW ReadConsoleInputA SetVolumeMountPointA GetFileAttributesA WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation GetVolumePathNameA IsBadStringPtrA WritePrivateProfileStringW GetLastError GetProcAddress MoveFileExA GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc DnsHostnameToComputerNameA GetFileType AddAtomW CreateEventW FoldStringW EnumResourceTypesW FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetCPInfoExA SetFileShortNameA GetVersionExA SetFileValidData LCMapStringW VirtualAlloc TlsGetValue TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

user32

ClientToScreen

advapi32

DeregisterEventSource

Sharing