312b08af732069833358094647763db8[.]exe

General

Target
312b08af732069833358094647763db8.exe
Size 209KB
Sample221031-vzvbzabeg7
SHA256 3ce35189ec036d271ac8f59542a40478d74ebb1ef707c6d9968d126c15e2803f
MD5 312b08af732069833358094647763db8
SHA1 6fba36cf4a478f5f6dddf3a335979947f85c313d
SHA512 14cf6df1c6a5c0ff697e1e901da123d9012b1083d122e1833a4e75867ed37222f910813724adab5d307777d33eb051a41936929cca514adee44de66e6d784380
SSDEEP 3072:Jk1E4lO84Jw2LTqWnf5Jr+QNPXSlPnnDZ+9VDCyd/Mq9C4x:JkeY/4JdLTq2rjX2/47+yBMv4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

312b08af732069833358094647763db8.exe

.exe 209KB

312b08af732069833358094647763db8.exe

IMPHASH 92fd52968f8d7a0a9591a0e6eb7642f5
SHA256 3ce35189ec036d271ac8f59542a40478d74ebb1ef707c6d9968d126c15e2803f
MD5 312b08af732069833358094647763db8
SHA1 6fba36cf4a478f5f6dddf3a335979947f85c313d
SHA512 14cf6df1c6a5c0ff697e1e901da123d9012b1083d122e1833a4e75867ed37222f910813724adab5d307777d33eb051a41936929cca514adee44de66e6d784380
SSDEEP 3072:Jk1E4lO84Jw2LTqWnf5Jr+QNPXSlPnnDZ+9VDCyd/Mq9C4x:JkeY/4JdLTq2rjX2/47+yBMv4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

37974

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedExchange SetSystemTimeAdjustment GetNumaProcessorNode GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExW MoveFileWithProgressA VerifyVersionInfoW LocalLock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW SetWaitableTimer GetVersionExA FindResourceA GetComputerNameExW OpenEventA SearchPathA GetComputerNameA CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc FoldStringA GetFileTime GetConsoleAliasesLengthA GetSystemWindowsDirectoryW GetACP SetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxA FindNextVolumeA MoveFileWithProgressW CancelDeviceWakeupRequest LocalUnlock GetConsoleFontSize InterlockedCompareExchange GetPrivateProfileStructW EnumCalendarInfoA EnterCriticalSection InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI GetTickCount SetLastError WriteConsoleW GetVolumeInformationA GetThreadPriority LoadLibraryW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing