699aaea1598a034cde7ed88cd8a8a36fd59447e09bddef566357061774c48a76[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
699aaea1598a034cde7ed88cd8a8a36fd59447e09bddef566357061774c48a76.exe
Size 555KB
Sample221130-2gs5hsbc78
SHA256 699aaea1598a034cde7ed88cd8a8a36fd59447e09bddef566357061774c48a76
MD5 6d5b9675b68bac95b885b4bb294134a1
SHA1 74dbf463be3139a28d9851b3b80c2ecac3e56304
SHA512 5bc03425855057dd1f7cd9d5b61c3c895eb1ac48401aa4bd807e56560b149aefe1d9f2c7c73225f0e705923e5e2dd2d65490e1ba668dc788852ebc51f63bbe00
SSDEEP 12288:SW0nwOZKGC9FGKRTyBQPqPgrSrMGu4fGxzWjQ9dGB3K4d:ShwVGKR+BQPqPgKM2GxzMyGhK4
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

699aaea1598a034cde7ed88cd8a8a36fd59447e09bddef566357061774c48a76.exe

.exe 555KB

699aaea1598a034cde7ed88cd8a8a36fd59447e09bddef566357061774c48a76.exe

IMPHASH 544e4498dc502665883290ca1bc2424d
SHA256 699aaea1598a034cde7ed88cd8a8a36fd59447e09bddef566357061774c48a76
MD5 6d5b9675b68bac95b885b4bb294134a1
SHA1 74dbf463be3139a28d9851b3b80c2ecac3e56304
SHA512 5bc03425855057dd1f7cd9d5b61c3c895eb1ac48401aa4bd807e56560b149aefe1d9f2c7c73225f0e705923e5e2dd2d65490e1ba668dc788852ebc51f63bbe00
SSDEEP 12288:SW0nwOZKGC9FGKRTyBQPqPgrSrMGu4fGxzWjQ9dGB3K4d:ShwVGKR+BQPqPgKM2GxzMyGhK4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

225307

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wldap32

ord13 ord88 ord14 ord215 ord41 ord72 ord145 ord191 ord135 ord206 ord224 ord140 ord27 ord26

kernel32

FindVolumeClose GetFileAttributesW GetFileAttributesExW GetFullPathNameW GetVolumeInformationW GetTempPathW GetVolumePathNamesForVolumeNameW OutputDebugStringW CloseHandle GetLastError DeviceIoControl SetEvent WaitForSingleObject CreateMutexW OpenMutexW CreateEventW Sleep GetCurrentProcessId CreateThread GetModuleFileNameW LocalAlloc LocalFree WinExec FindNextVolumeW CopyFileW MoveFileW FreeConsole GetComputerNameExW LCMapStringW IsValidCodePage FindFirstFileExW GetTimeZoneInformation HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType CompareStringW GetTimeFormatW GetDateFormatW HeapFree CreateProcessW FindNextFileW FindFirstVolumeW FindFirstFileW FindClose CreateFileW GetCurrentDirectoryW GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize WriteConsoleW SetEndOfFile GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FormatMessageW FormatMessageA WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx TryEnterCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW QueryPerformanceCounter HeapAlloc GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx CompareStringEx GetCPInfo InitializeCriticalSectionAndSpinCount ResetEvent IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW InitializeSListHead GetCurrentProcess TerminateProcess RaiseException RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW SetFileAttributesW ExitThread FreeLibraryAndExitThread GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetExitCodeProcess

user32

SystemParametersInfoW GetSystemMetrics

shell32

SHChangeNotify ShellExecuteA

ole32

CoInitializeSecurity CoSetProxyBlanket CoCreateInstance CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysAllocStringLen SysAllocString VariantInit

advapi32

SetEntriesInAclW StartServiceCtrlDispatcherW SetServiceStatus RegisterServiceCtrlHandlerW QueryServiceStatusEx OpenServiceW OpenSCManagerW GetServiceDisplayNameW DeleteService CreateServiceW ControlService CloseServiceHandle ChangeServiceConfigA RegSetValueExW RegOpenKeyExW RegCreateKeyExW SetSecurityDescriptorDacl SetFileSecurityW InitializeSecurityDescriptor AllocateAndInitializeSid