745b14fa0171cb190f66dbff6d8a083f[.]exe

General

Target
745b14fa0171cb190f66dbff6d8a083f.exe
Size 269KB
Sample221010-hzx2msbbek
SHA256 d35d51ee4b5fdac26fe5c8202db6683eeabaf2cbbf0567be5065a7db18d571a8
MD5 745b14fa0171cb190f66dbff6d8a083f
SHA1 4db93a1b6d020fc75a7a77f5701082550f4e3054
SHA512 971f6d645a729cfb7c9003b70af74730d62d974139879c133cfc4e5d3bd8c778946e62e6b6b28705f45755049c3a220005b875ffc9e5b7cdf37a1a833807ebe0
SSDEEP 3072:48XJtwgLqEIC4k1PcZUQv5Zo5bdFFs09a9FF14q/XnawJzkuwRT/pYvm6kM/h3qS:44ZLqXcQTo5bdk09aDfDkX6krwVfquS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

745b14fa0171cb190f66dbff6d8a083f.exe

.exe 269KB

745b14fa0171cb190f66dbff6d8a083f.exe

IMPHASH 0e031262b5cbf6d6bc1e7983bf0abd6f
SHA256 d35d51ee4b5fdac26fe5c8202db6683eeabaf2cbbf0567be5065a7db18d571a8
MD5 745b14fa0171cb190f66dbff6d8a083f
SHA1 4db93a1b6d020fc75a7a77f5701082550f4e3054
SHA512 971f6d645a729cfb7c9003b70af74730d62d974139879c133cfc4e5d3bd8c778946e62e6b6b28705f45755049c3a220005b875ffc9e5b7cdf37a1a833807ebe0
SSDEEP 3072:48XJtwgLqEIC4k1PcZUQv5Zo5bdFFs09a9FF14q/XnawJzkuwRT/pYvm6kM/h3qS:44ZLqXcQTo5bdk09aDfDkX6krwVfquS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29984

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile FindActCtxSectionGuid SetConsoleTextAttribute GetConsoleAliasA WaitNamedPipeA HeapFree SetComputerNameW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA EnumCalendarInfoExW FindResourceExA SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetFileAttributesA WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation GetVolumePathNameA IsBadStringPtrA WritePrivateProfileStringW GetLastError GetProcAddress IsBadHugeReadPtr PeekConsoleInputW CreateTimerQueueTimer GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc AddAtomW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA SetConsoleCursorInfo GetModuleHandleA CreateMutexA FindNextFileW VirtualProtect GetShortPathNameW GetCPInfoExA SetFileShortNameA GetVersionExA EnumResourceLanguagesW SetFileValidData DeleteFileA MoveFileExA VirtualAlloc FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount ReadFile SetStdHandle HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetProcessHeap

user32

ClientToScreen

advapi32

DeregisterEventSource BackupEventLogW

Sharing