bfab8adba629a6f9c414e8ecb562766b[.]exe

General

Target
bfab8adba629a6f9c414e8ecb562766b.exe
Size 294KB
Sample221012-trcxaabagm
SHA256 ca1230de5c5b8eddbe33c021a2a3537730962b7aae5d8622ce4d0a53dd98ba30
MD5 bfab8adba629a6f9c414e8ecb562766b
SHA1 aa9acc323a6ab61a279013bda794589a040062ab
SHA512 ffb24400e73b68e5c3645a5a30bcce92fe096b3b208833a7ab9f9632be12440703a58d7fd291a6ab81b3f4f3adadfbc427de4a5cbc30bd322fc77becc148c6aa
SSDEEP 6144:eSTeIfzPK1yp36HlJ84JgbYfANpt7jeigavwVf:exIDK1s6A4JCYEpt7jT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bfab8adba629a6f9c414e8ecb562766b.exe

.exe 294KB

bfab8adba629a6f9c414e8ecb562766b.exe

IMPHASH 431995fc4e1c6b7aa6a3a333f4d305c5
SHA256 ca1230de5c5b8eddbe33c021a2a3537730962b7aae5d8622ce4d0a53dd98ba30
MD5 bfab8adba629a6f9c414e8ecb562766b
SHA1 aa9acc323a6ab61a279013bda794589a040062ab
SHA512 ffb24400e73b68e5c3645a5a30bcce92fe096b3b208833a7ab9f9632be12440703a58d7fd291a6ab81b3f4f3adadfbc427de4a5cbc30bd322fc77becc148c6aa
SSDEEP 6144:eSTeIfzPK1yp36HlJ84JgbYfANpt7jeigavwVf:exIDK1s6A4JCYEpt7jT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30256

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW IsBadStringPtrW GetCPInfoExW GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA AddAtomA FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetBinaryTypeW CreateMutexW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing