a5bff0e953f87b927d2aea29460e7b58[.]exe

General

Target
a5bff0e953f87b927d2aea29460e7b58.exe
Size 206KB
Sample221012-2jslrsfdcn
SHA256 ffd2dd34c696d7c8ee4385523a64fe4921aed62e24f30ca4cfdb4026bf5cdbe1
MD5 a5bff0e953f87b927d2aea29460e7b58
SHA1 582a6c9a66e114a85128af43e85c6bfa7131ef79
SHA512 33160af0530c0bc23770ce04ace50d3420d3135724e31ecc13003d10efdfd32880332c1da4db04eff73943469051403c4e2cfcb38d0393fcced9d5f77d22dd48
SSDEEP 3072:aXkDXF1ziNUMIPXFSa1mS5TGmmdgPA7sRIdp0+xHAXWwout:6M1B0Up1Sa1lmd4AgREpuXWw7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a5bff0e953f87b927d2aea29460e7b58.exe

.exe 206KB

a5bff0e953f87b927d2aea29460e7b58.exe

IMPHASH ae5dfb8ccfdee905354fa43508e8ea2a
SHA256 ffd2dd34c696d7c8ee4385523a64fe4921aed62e24f30ca4cfdb4026bf5cdbe1
MD5 a5bff0e953f87b927d2aea29460e7b58
SHA1 582a6c9a66e114a85128af43e85c6bfa7131ef79
SHA512 33160af0530c0bc23770ce04ace50d3420d3135724e31ecc13003d10efdfd32880332c1da4db04eff73943469051403c4e2cfcb38d0393fcced9d5f77d22dd48
SSDEEP 3072:aXkDXF1ziNUMIPXFSa1mS5TGmmdgPA7sRIdp0+xHAXWwout:6M1B0Up1Sa1lmd4AgREpuXWw7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28816

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetBinaryTypeW TlsGetValue GetCPInfoExW GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA AddAtomW FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW IsBadStringPtrA CreateMutexW HeapFree GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing