72bab2f5022e2a693bacd6e525f692b4[.]exe

General

Target
72bab2f5022e2a693bacd6e525f692b4.exe
Size 390KB
Sample221203-wsk1dsdb36
SHA256 72a5dbc36f17ce80ba47ccdba7af4be5ed7952c05e508a0141f69ba50e314ea3
MD5 72bab2f5022e2a693bacd6e525f692b4
SHA1 f4a05cde09c69f18a11ea2b7f83a4462d0ae5908
SHA512 66d378eda501910d25e391e6a57231549c06549967e789b17f5300609b5c2d35c47ef98221aa256093ecbc2293dd173d9dd465e3837ac24e2a328284ac51bc16
SSDEEP 6144:8GHAM5cilZ7Yk8bE6Ww8E+4vZf8Ox3LVw5nMW2RqnrffBY:8YbDpx8bE/MZ8Ox3xwdMW3rffBY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

72bab2f5022e2a693bacd6e525f692b4.exe

.exe 390KB

72bab2f5022e2a693bacd6e525f692b4.exe

IMPHASH 2ecba4f94e8f44b19ea360cb81da7876
SHA256 72a5dbc36f17ce80ba47ccdba7af4be5ed7952c05e508a0141f69ba50e314ea3
MD5 72bab2f5022e2a693bacd6e525f692b4
SHA1 f4a05cde09c69f18a11ea2b7f83a4462d0ae5908
SHA512 66d378eda501910d25e391e6a57231549c06549967e789b17f5300609b5c2d35c47ef98221aa256093ecbc2293dd173d9dd465e3837ac24e2a328284ac51bc16
SSDEEP 6144:8GHAM5cilZ7Yk8bE6Ww8E+4vZf8Ox3LVw5nMW2RqnrffBY:8YbDpx8bE/MZ8Ox3xwdMW3rffBY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24528

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize lstrlenA GetProfileIntW lstrcpynA OpenJobObjectA SetFirmwareEnvironmentVariableA CreateJobObjectW AddConsoleAliasW GetComputerNameW GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW TlsSetValue GetVolumeInformationA LoadLibraryW CopyFileW GetCalendarInfoW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo WriteConsoleW GetBinaryTypeW FillConsoleOutputCharacterA SetThreadPriority GetConsoleAliasesW GetCPInfoExW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetProcessWorkingSetSize LocalAlloc CreateHardLinkW AddAtomW FindNextChangeNotification FoldStringW GetModuleHandleA GetVolumeNameForVolumeMountPointW GlobalReAlloc SetFileAttributesW LCMapStringW DeleteFileA GetVolumePathNameA GetFullPathNameW HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RaiseException SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

advapi32

RegQueryInfoKeyW

Sharing