813f6f0046b96aca831a7f2f45bc90e38421921071d58d8374d61dffdc3d1ca6[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
813f6f0046b96aca831a7f2f45bc90e38421921071d58d8374d61dffdc3d1ca6.exe
Size 384KB
Sample221212-ca144scg6w
SHA256 813f6f0046b96aca831a7f2f45bc90e38421921071d58d8374d61dffdc3d1ca6
MD5 a5f912cf5be9c9f1e9cb968ef640bc5a
SHA1 9ff57be5346363506007a83a1a0baf8dc33cdfe9
SHA512 dc6b46e15eaa687afbbd5e3ec19c67a5391a06f6905408e7604708797ff9a6990175c850398726f10ae7058256f2a59c4a03652a97cff5631c17423311d29e8f
SSDEEP 6144:BD+bALHQcUFXMjHOqpgpLH2bLIdtBomHk1NIz8q1hh6K9W9n8ded89kTR:BD+0zQc0cTOqSLIAbgMTIK9W9ntaw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

813f6f0046b96aca831a7f2f45bc90e38421921071d58d8374d61dffdc3d1ca6.exe

.exe 384KB

813f6f0046b96aca831a7f2f45bc90e38421921071d58d8374d61dffdc3d1ca6.exe

IMPHASH dd021619be333394dbb32a14f86d077c
SHA256 813f6f0046b96aca831a7f2f45bc90e38421921071d58d8374d61dffdc3d1ca6
MD5 a5f912cf5be9c9f1e9cb968ef640bc5a
SHA1 9ff57be5346363506007a83a1a0baf8dc33cdfe9
SHA512 dc6b46e15eaa687afbbd5e3ec19c67a5391a06f6905408e7604708797ff9a6990175c850398726f10ae7058256f2a59c4a03652a97cff5631c17423311d29e8f
SSDEEP 6144:BD+bALHQcUFXMjHOqpgpLH2bLIdtBomHk1NIz8q1hh6K9W9n8ded89kTR:BD+0zQc0cTOqSLIAbgMTIK9W9ntaw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28966

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA GetPriorityClass GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoW GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA FillConsoleOutputCharacterW GetProfileIntW GetProcAddress VirtualAlloc EnumSystemCodePagesW SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringA FindFirstChangeNotificationA GetFileInformationByHandle FindActCtxSectionStringW TlsGetValue GetCPInfo GetVolumeNameForVolumeMountPointA GetLastError GetFullPathNameW ReadFile HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogW ReportEventW

ole32

WriteFmtUserTypeStg

winhttp

WinHttpCloseHandle