af46049d6970f2ff4f31adf6bdca1ebb[.]exe

General

Target
af46049d6970f2ff4f31adf6bdca1ebb.exe
Size 295KB
Sample221012-trcxaabagl
SHA256 b8eed569badd754db5b73747fe93667e6a5dc05c8a089eddcc8fdb63fa62e91d
MD5 af46049d6970f2ff4f31adf6bdca1ebb
SHA1 a0e918c7f7c9afce7433fd299f7cbdd32f91811a
SHA512 6437cf597d1051d1bdf6814aea2b429e93ac01d61d4a8b95aaf383da2db134a96bc7fb1e4f39c18b093c70102f6b8bdd70ccc4a75ae874c2615c111bc95bf883
SSDEEP 6144:I5idq+YwHjihj+UZxyWD6iTFXgkSueigavwVf:IIk+VDihvOxuT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

af46049d6970f2ff4f31adf6bdca1ebb.exe

.exe 295KB

af46049d6970f2ff4f31adf6bdca1ebb.exe

IMPHASH e7335d11c67dfcbac096cafa51d4b057
SHA256 b8eed569badd754db5b73747fe93667e6a5dc05c8a089eddcc8fdb63fa62e91d
MD5 af46049d6970f2ff4f31adf6bdca1ebb
SHA1 a0e918c7f7c9afce7433fd299f7cbdd32f91811a
SHA512 6437cf597d1051d1bdf6814aea2b429e93ac01d61d4a8b95aaf383da2db134a96bc7fb1e4f39c18b093c70102f6b8bdd70ccc4a75ae874c2615c111bc95bf883
SSDEEP 6144:I5idq+YwHjihj+UZxyWD6iTFXgkSueigavwVf:IIk+VDihvOxuT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30368

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing