7138cd509c6c098feaf4128f7ed5b74a74a646e45137c6550f1231dbdac22600[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
7138cd509c6c098feaf4128f7ed5b74a74a646e45137c6550f1231dbdac22600.exe
Size 368KB
Sample221220-mkdrnscd8v
SHA256 7138cd509c6c098feaf4128f7ed5b74a74a646e45137c6550f1231dbdac22600
MD5 dc4ae2105938cb68c5b6988465e13da1
SHA1 4bf9313e1b4f51df9b94cf73e36adb53f8c29ac0
SHA512 02ad76fcda95f5fc06bc8c5f0fa7e103379f7001e05f1bb23bfe1e67262bda8b045ae1f317569aa30a44566bf26bcb487ec9319f1a51fff79d57c40612b1bdf7
SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371o0:/uTs1gBpQL5kmh0671o0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

7138cd509c6c098feaf4128f7ed5b74a74a646e45137c6550f1231dbdac22600.exe

.exe 368KB

7138cd509c6c098feaf4128f7ed5b74a74a646e45137c6550f1231dbdac22600.exe

IMPHASH 266bed6766ee2a20cf7c2dd0d6245d96
SHA256 7138cd509c6c098feaf4128f7ed5b74a74a646e45137c6550f1231dbdac22600
MD5 dc4ae2105938cb68c5b6988465e13da1
SHA1 4bf9313e1b4f51df9b94cf73e36adb53f8c29ac0
SHA512 02ad76fcda95f5fc06bc8c5f0fa7e103379f7001e05f1bb23bfe1e67262bda8b045ae1f317569aa30a44566bf26bcb487ec9319f1a51fff79d57c40612b1bdf7
SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371o0:/uTs1gBpQL5kmh0671o0
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

158849

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess CreateProcessW ExitThread WaitForSingleObject GetLastError ExitProcess IsDebuggerPresent GetVersionExW GetVolumeInformationW SetEndOfFile HeapSize WriteConsoleW ReadConsoleW GetProcAddress FindFirstFileExW FindClose GetCommandLineW GetCommandLineA GetProcessHeap SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP IsValidCodePage SetFilePointerEx GetConsoleMode GetConsoleCP GetModuleHandleW CreateProcessA GetStartupInfoA GetModuleFileNameW SetFileAttributesA CopyFileA GetFileAttributesA GetModuleFileNameA CloseHandle ReadFile GetFileSize CreateFileW GetFileAttributesW FindFirstFileW FindNextFileW SetFileAttributesW GetLocalTime CreateThread WinExec GetLogicalDrives SetStdHandle FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale Sleep GetFileAttributesExW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead WideCharToMultiByte MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo FreeLibrary LoadLibraryExW RaiseException RtlUnwind QueryPerformanceFrequency MoveFileExW GetModuleHandleExW GetStdHandle WriteFile GetACP HeapAlloc HeapReAlloc HeapFree GetFileType GetExitCodeProcess

user32

GetSystemMetrics LoadCursorW RegisterClassExW CreateWindowExW ShowWindow ScreenToClient GetCursorPos DrawTextA MessageBoxW DefWindowProcW PostQuitMessage DestroyWindow SetTimer KillTimer InvalidateRect EndPaint DrawTextW FillRect BeginPaint DispatchMessageW TranslateMessage GetMessageW GetWindowLongW SetWindowLongW

gdi32

LineTo MoveToEx CreatePen SetBkMode DeleteObject TextOutA TextOutW SetTextColor SetBkColor SelectObject CreateFontW CreateSolidBrush

advapi32

SystemFunction036 RegCloseKey RegQueryValueExW RegOpenKeyExW GetUserNameW

wininet

InternetOpenUrlW InternetReadFile InternetOpenW

netapi32

NetUserGetInfo

Name

.text

Size

269KB

Virtual Size

269KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

840B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ