ca6e023ab975494e626c825e45f6873c[.]exe

General

Target
ca6e023ab975494e626c825e45f6873c.exe
Size 191KB
Sample221202-afhhvahe51
SHA256 cf4c64e20ab121c8740766b6dd10cd18d2b5085dbe30f876bae2b66952f25065
MD5 ca6e023ab975494e626c825e45f6873c
SHA1 03081a7f1d82ac3c88bcfac56807ffcae6e344cb
SHA512 3025694c2db5510956f5d63e6f98f14bbfd58d01abcb8de77175dc847266caed6edda5a4fc1f1edbe91d21c92cbcaf5103abba55389f1247fcd6fb5dd3764560
SSDEEP 3072:ELbmvz/Y3XIjy9IJ5tCYDeYuYTp8xiY40KwfXdObOGvvvvvv9Rs9E3AZxpR/u7UY:El3XI295QLuYp8Pd9fXdaOXvpd
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ca6e023ab975494e626c825e45f6873c.exe

.exe 191KB

ca6e023ab975494e626c825e45f6873c.exe

IMPHASH a6cdb7f0d4b2ba7598c0b2cd83ca7720
SHA256 cf4c64e20ab121c8740766b6dd10cd18d2b5085dbe30f876bae2b66952f25065
MD5 ca6e023ab975494e626c825e45f6873c
SHA1 03081a7f1d82ac3c88bcfac56807ffcae6e344cb
SHA512 3025694c2db5510956f5d63e6f98f14bbfd58d01abcb8de77175dc847266caed6edda5a4fc1f1edbe91d21c92cbcaf5103abba55389f1247fcd6fb5dd3764560
SSDEEP 3072:ELbmvz/Y3XIjy9IJ5tCYDeYuYTp8xiY40KwfXdObOGvvvvvv9Rs9E3AZxpR/u7UY:El3XI295QLuYp8Pd9fXdaOXvpd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18087

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenMutexA GetConsoleAliasExesLengthW CompareStringA SetVolumeLabelA QueryDosDeviceA EnumCalendarInfoExW SetProcessPriorityBoost AddConsoleAliasW CreateFileA SetComputerNameW GetWindowsDirectoryW GetModuleHandleW GlobalLock FindFirstVolumeMountPointA CreateDirectoryExA GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathA MoveFileA CallNamedPipeW GetCurrentDirectoryA GetDriveTypeA CreateMailslotA CommConfigDialogW GetProcAddress GetModuleHandleA LocalAlloc GetBinaryTypeA GetCPInfoExW GetCommandLineW VerifyVersionInfoA CancelTimerQueueTimer GetHandleInformation FindResourceA FormatMessageA CreateJobObjectW ReadConsoleOutputAttribute GetConsoleFontSize FindFirstVolumeA LocalFlags LoadLibraryA DuplicateHandle EnumDateFormatsW GetSystemDirectoryW VerSetConditionMask GetComputerNameW EnumSystemLocalesA InterlockedFlushSList WritePrivateProfileSectionW WritePrivateProfileStructA GetStringTypeExA GetPrivateProfileSectionNamesW CopyFileW GetComputerNameExW GetShortPathNameW FlushFileBuffers GetOverlappedResult GetPrivateProfileStructW DeleteFiber InterlockedCompareExchange InterlockedExchangeAdd EnumDateFormatsA GetNumberOfConsoleInputEvents EnumCalendarInfoW InterlockedDecrement InterlockedExchange GetNamedPipeHandleStateA DeactivateActCtx GenerateConsoleCtrlEvent AddAtomW GetThreadPriority FreeEnvironmentStringsA SetConsoleTitleW SetVolumeMountPointA _hread GetWindowsDirectoryA ClearCommBreak lstrlenW GlobalFindAtomW TerminateJobObject CopyFileA lstrcpynW GetProcessPriorityBoost GetMailslotInfo HeapWalk GetNamedPipeInfo EnumSystemCodePagesW UnregisterWait LoadLibraryW GetLastError WideCharToMultiByte HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapSize ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

gdi32

GetCharWidthW GetCharABCWidthsA

Sharing