11123b38b1013675616c9c50a8377a2a[.]exe

General

Target
11123b38b1013675616c9c50a8377a2a.exe
Size 729KB
Sample221013-klez1sbdek
SHA256 9e9f4e923ecd77b81a6d460031069c4a16ca9f79e534043d8aadfe3416257790
MD5 11123b38b1013675616c9c50a8377a2a
SHA1 42633b68bfe4d4abdb7061f10eaa93124adc0b11
SHA512 6e0e7019fdee267db461430ca077f69c8e56a9c6648718209580e6fe8697910ac84f81587c16927f14edb484f4e4efc89e212ce79903b6ba78366620fa2a392a
SSDEEP 12288:+ocbMvw+i+pCQjwsVlC2MSssAj5pBGGN18761Xe1MB7/VtPyPEENce:+Bd+pC1FbSssMBe761XQMt/PyPx
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

11123b38b1013675616c9c50a8377a2a.exe

.exe 729KB

11123b38b1013675616c9c50a8377a2a.exe

IMPHASH 85d37ce0ad0f54e9c19dfda5f234c7b8
SHA256 9e9f4e923ecd77b81a6d460031069c4a16ca9f79e534043d8aadfe3416257790
MD5 11123b38b1013675616c9c50a8377a2a
SHA1 42633b68bfe4d4abdb7061f10eaa93124adc0b11
SHA512 6e0e7019fdee267db461430ca077f69c8e56a9c6648718209580e6fe8697910ac84f81587c16927f14edb484f4e4efc89e212ce79903b6ba78366620fa2a392a
SSDEEP 12288:+ocbMvw+i+pCQjwsVlC2MSssAj5pBGGN18761Xe1MB7/VtPyPEENce:+Bd+pC1FbSssMBe761XQMt/PyPx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40886

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA GetComputerNameW VerLanguageNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort ReadConsoleA lstrcpynW WriteConsoleA GetCommandLineW WriteConsoleOutputA GetCommandLineA CreateActCtxW FormatMessageW GetModuleHandleW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA LocalFlags FindResourceA RtlCaptureContext InterlockedCompareExchange LeaveCriticalSection GetPrivateProfileStructW DeleteFiber EnumDateFormatsW EnumCalendarInfoA InterlockedExchange InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError CopyFileW LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

SetThreadToken

Sharing