fb2eaf54ab072e532cce2674c62403c9[.]exe

General

Target
fb2eaf54ab072e532cce2674c62403c9.exe
Size 300KB
Sample221012-g4xe8scfh6
SHA256 99208edd8107914693c2c75142f523d3f1136ae31db1493b1cbb1ee9537e00a2
MD5 fb2eaf54ab072e532cce2674c62403c9
SHA1 9195aef5db792a46d77085322c582ca25067f34d
SHA512 58ff36d65ceabe1e68a6e265f83bfa745d6e91b40ad38f9f330190ad36a8d5fc1b313219c3ee79d7df6a5c0b7e4dbf320a3a537beed6782c8a1172fa461e69c2
SSDEEP 6144:4O7RsPy6firfgPlreoD1gKzLLtExeigavwVfquSQ:PFiflPlreoDrLxWTZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

fb2eaf54ab072e532cce2674c62403c9.exe

.exe 300KB

fb2eaf54ab072e532cce2674c62403c9.exe

IMPHASH f86972b0b9fc89569bd497bebfd6a497
SHA256 99208edd8107914693c2c75142f523d3f1136ae31db1493b1cbb1ee9537e00a2
MD5 fb2eaf54ab072e532cce2674c62403c9
SHA1 9195aef5db792a46d77085322c582ca25067f34d
SHA512 58ff36d65ceabe1e68a6e265f83bfa745d6e91b40ad38f9f330190ad36a8d5fc1b313219c3ee79d7df6a5c0b7e4dbf320a3a537beed6782c8a1172fa461e69c2
SSDEEP 6144:4O7RsPy6firfgPlreoD1gKzLLtExeigavwVfquSQ:PFiflPlreoDrLxWTZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29936

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing