AF4E159A331DE4586E272E8E01881DAD17FE56EE168E2[.]exe

General

Target
AF4E159A331DE4586E272E8E01881DAD17FE56EE168E2.exe
Size 390KB
Sample221017-pf2daabgc9
SHA256 af4e159a331de4586e272e8e01881dad17fe56ee168e2cffb9d192cd95bbdb26
MD5 67d73eee2d49a0c5478da1b6db80f510
SHA1 cf1837863ef2c5e992171b6f358a7e623645a32d
SHA512 997aa3fa5d0040314a38f1d8417d542244588487fdba5f62072332344f549ef6ad54d71c579b7d1150eb60ff1f56e079b0b5777724690d66cb3df45b1420ae1e
SSDEEP 6144:RX+ZyZVodVOZq5naa+0xE61RUvG6DaRmZuNYETh0bKsH:RXuyZiON10B1OvMYEdKJH
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

AF4E159A331DE4586E272E8E01881DAD17FE56EE168E2.exe

.exe 390KB

AF4E159A331DE4586E272E8E01881DAD17FE56EE168E2.exe

IMPHASH 62e5e433525a836ab07f79f0ab9b6078
SHA256 af4e159a331de4586e272e8e01881dad17fe56ee168e2cffb9d192cd95bbdb26
MD5 67d73eee2d49a0c5478da1b6db80f510
SHA1 cf1837863ef2c5e992171b6f358a7e623645a32d
SHA512 997aa3fa5d0040314a38f1d8417d542244588487fdba5f62072332344f549ef6ad54d71c579b7d1150eb60ff1f56e079b0b5777724690d66cb3df45b1420ae1e
SSDEEP 6144:RX+ZyZVodVOZq5naa+0xE61RUvG6DaRmZuNYETh0bKsH:RXuyZiON10B1OvMYEdKJH
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23394

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetWaitableTimer WaitNamedPipeA CommConfigDialogW SetSystemTimeAdjustment SearchPathA GetCPInfoExA GetModuleFileNameA DeleteFileA GetConsoleAliasesLengthA EnumResourceTypesA FillConsoleOutputCharacterW WriteConsoleOutputCharacterW LocalAlloc GetProcAddress GetModuleHandleW LoadLibraryW GetConsoleAliasW FindFirstChangeNotificationW WritePrivateProfileStringW EnumResourceNamesA SearchPathW lstrcpynA AddAtomA GetConsoleAliasesLengthW FreeConsole GetComputerNameExW FindNextFileW SetPriorityClass BuildCommDCBAndTimeoutsW OpenJobObjectA InitializeCriticalSection FindResourceExW SetConsoleMode _lclose GlobalUnWire SetCommMask GetFileSizeEx WriteConsoleOutputCharacterA CreateDirectoryExA FoldStringA HeapReAlloc HeapAlloc RtlUnwind AddRefActCtx HeapSize MultiByteToWideChar GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer RaiseException GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId GetLastError SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess WideCharToMultiByte LCMapStringW GetStringTypeW LeaveCriticalSection EnterCriticalSection HeapFree Sleep

user32

ClientToScreen ScreenToClient

advapi32

BackupEventLogW CloseEventLog GetOldestEventLogRecord ReportEventW

winhttp

WinHttpReadData WinHttpSetTimeouts

Sharing