78cfc564141e12da9a1fe79a7703efa9edd2148f08be47b8077f6dc383a8ce14[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
78cfc564141e12da9a1fe79a7703efa9edd2148f08be47b8077f6dc383a8ce14.exe
Size 182KB
Sample221113-gcagdsae79
SHA256 78cfc564141e12da9a1fe79a7703efa9edd2148f08be47b8077f6dc383a8ce14
MD5 9a5211f6e491d812d15363168783906c
SHA1 0d06ee595404de3264da3c71f489392b64fa1e2e
SHA512 f719f053a99c7d196e92b9743aabeee7cbdfdfb9a7a4378ddcbba27dcd7b7b6c2947bb73970f63a9fe789348f974c681a1ab9c944fa21e1a7c38a06b7b7fe237
SSDEEP 3072:tuTO4rRZi3mvXemGXcXscjGU39Aq+ZDPUEMTlqqYhCg9QD+IZ:tkZ0mvumGX4ws9EZDPFMT2baZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

78cfc564141e12da9a1fe79a7703efa9edd2148f08be47b8077f6dc383a8ce14.exe

.exe 182KB

78cfc564141e12da9a1fe79a7703efa9edd2148f08be47b8077f6dc383a8ce14.exe

IMPHASH 72567d001c30c3c46b19a98842491779
SHA256 78cfc564141e12da9a1fe79a7703efa9edd2148f08be47b8077f6dc383a8ce14
MD5 9a5211f6e491d812d15363168783906c
SHA1 0d06ee595404de3264da3c71f489392b64fa1e2e
SHA512 f719f053a99c7d196e92b9743aabeee7cbdfdfb9a7a4378ddcbba27dcd7b7b6c2947bb73970f63a9fe789348f974c681a1ab9c944fa21e1a7c38a06b7b7fe237
SSDEEP 3072:tuTO4rRZi3mvXemGXcXscjGU39Aq+ZDPUEMTlqqYhCg9QD+IZ:tkZ0mvumGX4ws9EZDPFMT2baZ
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

95292

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CreateServiceW RegisterEventSourceW CloseServiceHandle OpenProcessToken DeleteService OpenThreadToken OpenSCManagerW StartServiceCtrlDispatcherW SetThreadToken SetSecurityDescriptorGroup OpenServiceW GetTokenInformation RegEnumKeyW RegCreateKeyExW EqualSid RegQueryValueExW DeregisterEventSource InitializeSecurityDescriptor RegDeleteKeyW SetSecurityDescriptorDacl LookupPrivilegeValueW GetAce GetSecurityDescriptorLength RegGetKeySecurity QueryServiceStatus RegDeleteValueW MakeAbsoluteSD InitializeAcl AllocateAndInitializeSid SetServiceStatus SetSecurityDescriptorOwner GetSecurityDescriptorOwner AddAccessAllowedAce RevertToSelf FreeSid RegOpenKeyExW MakeSelfRelativeSD RegisterServiceCtrlHandlerW ReportEventW GetLengthSid ControlService RegEnumKeyExW AdjustTokenPrivileges RegCloseKey RegSetValueExW

kernel32

GetSystemDefaultLangID ExitProcess GetCommandLineW GetEnvironmentVariableW FreeLibrary CreateProcessW LoadLibraryExW GetCurrentProcess WaitForSingleObject SetEvent OutputDebugStringW GetModuleHandleW GetCurrentThread WriteFile InitializeCriticalSection OpenProcess GlobalAlloc WideCharToMultiByte LoadLibraryW GetLocaleInfoW Sleep FormatMessageW GetVersionExW LeaveCriticalSection GetModuleFileNameW CompareStringW GetACP lstrcmpW MultiByteToWideChar lstrlenW GetStdHandle GetLastError SetLastError GetProcAddress EnterCriticalSection GlobalFree UnhandledExceptionFilter GetFileType SetConsoleCtrlHandler CreateEventW SetCurrentDirectoryW lstrcmpiW OpenEventW DeleteCriticalSection CloseHandle GetVersion CreateThread GetUserDefaultLangID GetSystemDirectoryW GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter SetUnhandledExceptionFilter GetStartupInfoW TerminateProcess

user32

DispatchMessageW PeekMessageW IsCharAlphaNumericW TranslateMessage MsgWaitForMultipleObjects PostQuitMessage GetMessageW PostThreadMessageW

msvcrt

__dllonexit _lock _onexit memcpy memset ?terminate@@YAXXZ _unlock __set_app_type _fmode _commode __setusermatherr _amsg_exit _initterm _acmdln exit _cexit _ismbblead _exit _XcptFilter __C_specific_handler __getmainargs _vsnprintf _vsnwprintf wcsrchr _wcsicmp

ntdll

RtlNtStatusToDosError RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

ole32

CoInitialize StgOpenStorage CoRevokeClassObject CoRegisterClassObject CoUninitialize

msi

ord222 ord141 ord228 ord78 ord280 ord240 ord136 ord8 ord196 ord88 ord131 ord190 ord70 ord148 ord169 ord199 ord175 ord197 ord184