48bb38443b4d3e73f56ebad155ec289b[.]exe

General

Target
48bb38443b4d3e73f56ebad155ec289b.exe
Size 428KB
Sample221015-tdb3tsfgdr
SHA256 8268f9015a04cc2c2385ca5b1bca91f04b3bc3854420b80a8ad5283beff08bd7
MD5 48bb38443b4d3e73f56ebad155ec289b
SHA1 747ca649dc81c8ef23bbf6ee8da91090f75d8f23
SHA512 16368c6e926f5f3f1093eafb563d36523f5752f5630558490fe20a107d47befb9ef8da0b7f219416a3d59cc1f441b6355bf31ce9dc747a61c83d471915287324
SSDEEP 6144:fZtG5mza6Y2/F03otRx/+k6qsDtsVqrzDH3W7QeFk0jmmYYwrwVfquS:fHa6104Th+5qezrzDHRW1OPd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

48bb38443b4d3e73f56ebad155ec289b.exe

.exe 428KB

48bb38443b4d3e73f56ebad155ec289b.exe

IMPHASH ae11519a6eac288b6a17a0c03e5a652c
SHA256 8268f9015a04cc2c2385ca5b1bca91f04b3bc3854420b80a8ad5283beff08bd7
MD5 48bb38443b4d3e73f56ebad155ec289b
SHA1 747ca649dc81c8ef23bbf6ee8da91090f75d8f23
SHA512 16368c6e926f5f3f1093eafb563d36523f5752f5630558490fe20a107d47befb9ef8da0b7f219416a3d59cc1f441b6355bf31ce9dc747a61c83d471915287324
SSDEEP 6144:fZtG5mza6Y2/F03otRx/+k6qsDtsVqrzDH3W7QeFk0jmmYYwrwVfquS:fHa6104Th+5qezrzDHRW1OPd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30112

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetTickCount ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW WritePrivateProfileStringW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc DnsHostnameToComputerNameA GetFileType AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers HeapSize MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringW GetProcessHeap GetConsoleOutputCP

advapi32

DeregisterEventSource

Resubmissions

Sharing