c2a071fde47f97b7ba12114d4d33a633[.]exe

General

Target
c2a071fde47f97b7ba12114d4d33a633.exe
Size 163KB
Sample221108-tagh5sgdbr
SHA256 ddb52ffb2e2290aafec54646409457dce6bdc093a8222a80f740a5d71593fe6f
MD5 c2a071fde47f97b7ba12114d4d33a633
SHA1 3080f8840b49635e03d931a3f9fb03c9e5c9a8e0
SHA512 daf3c2e33012ab3a38fa59900b52acd8c2d5eae605dfbb9e2522d9e781a78e6f7c16f376628e58a82d90985e9c8170fa85ec278b07e1e9462a1e430d53a62caa
SSDEEP 3072:G2bTmvwLPUu4lRtul7J50jNOEU3Xajad2rf8YraLX:XmILMu2kt5KNORXajacY/L
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c2a071fde47f97b7ba12114d4d33a633.exe

.exe 163KB

c2a071fde47f97b7ba12114d4d33a633.exe

IMPHASH b95a3cd963ad0eff6b25d585db1e99e4
SHA256 ddb52ffb2e2290aafec54646409457dce6bdc093a8222a80f740a5d71593fe6f
MD5 c2a071fde47f97b7ba12114d4d33a633
SHA1 3080f8840b49635e03d931a3f9fb03c9e5c9a8e0
SHA512 daf3c2e33012ab3a38fa59900b52acd8c2d5eae605dfbb9e2522d9e781a78e6f7c16f376628e58a82d90985e9c8170fa85ec278b07e1e9462a1e430d53a62caa
SSDEEP 3072:G2bTmvwLPUu4lRtul7J50jNOEU3Xajad2rf8YraLX:XmILMu2kt5KNORXajacY/L
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25686

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationA SetComputerNameW LocalFlags InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExW MoveFileWithProgressW SetVolumeLabelW GetProfileSectionA VerifyVersionInfoA QueryDosDeviceW LocalReAlloc DosDateTimeToFileTime VirtualQuery WaitForDebugEvent GlobalGetAtomNameW MapViewOfFile GetWindowsDirectoryA GetModuleHandleW VirtualProtect FindNextVolumeMountPointW IsBadWritePtr GlobalDeleteAtom LoadResource WriteConsoleInputW CopyFileW CancelWaitableTimer LocalAlloc FindResourceW OpenEventA SearchPathA ReadConsoleW CallNamedPipeW GetProcAddress GetModuleHandleA GlobalAlloc GetConsoleAliasesLengthW OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasW GetFileInformationByHandle GetDiskFreeSpaceExA DefineDosDeviceW GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleW ReleaseActCtx FindNextVolumeA LoadLibraryA GetComputerNameW MoveFileW EnumCalendarInfoA InterlockedIncrement GetPrivateProfileStructA InterlockedExchangeAdd EnumCalendarInfoW GetConsoleAliasExesLengthA InitializeCriticalSection InterlockedExchange GetNamedPipeHandleStateA SetFileApisToANSI SetFileTime GetThreadPriority LoadLibraryW CreateFileA Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP ReadFile CloseHandle

user32

GetAltTabInfoW

advapi32

SetThreadToken

winhttp

WinHttpWriteData

Sharing