1600a21943384b6d78419825adc3c642[.]exe

General

Target
1600a21943384b6d78419825adc3c642.exe
Size 284KB
Sample221223-v2j9sagg75
SHA256 d45eeb97dde56fddcdb417781ef75f4d2675eb6e22564522f8744c96cd25bd72
MD5 1600a21943384b6d78419825adc3c642
SHA1 4e26c696df88862df215d622f4d18bdbc355ac50
SHA512 bee55ca413016ec68dc01b44a919ab1b52101429ed24dc74cd8d2bb08841fd1011e3db646e493b5997eca3fafa9c1d6dc658d577a018059817d5d357f58463e1
SSDEEP 6144:YLczGXCcvSJ/t/zQ0zOPN5ZS6GZ5zukbCnAJpjcK:YEFM2tQ0I7ZDLGYAJpjcK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1600a21943384b6d78419825adc3c642.exe

.exe 284KB

1600a21943384b6d78419825adc3c642.exe

IMPHASH bcbfb27d06dfce296f146c1fb57c8a36
SHA256 d45eeb97dde56fddcdb417781ef75f4d2675eb6e22564522f8744c96cd25bd72
MD5 1600a21943384b6d78419825adc3c642
SHA1 4e26c696df88862df215d622f4d18bdbc355ac50
SHA512 bee55ca413016ec68dc01b44a919ab1b52101429ed24dc74cd8d2bb08841fd1011e3db646e493b5997eca3fafa9c1d6dc658d577a018059817d5d357f58463e1
SSDEEP 6144:YLczGXCcvSJ/t/zQ0zOPN5ZS6GZ5zukbCnAJpjcK:YEFM2tQ0I7ZDLGYAJpjcK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15438

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA EnumDateFormatsW OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleW CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LoadLibraryA LocalAlloc ReadConsoleInputW SearchPathA GetCommandLineW ChangeTimerQueueTimer FindResourceA FormatMessageA DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ProcessIdToSessionId OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA CallNamedPipeW GenerateConsoleCtrlEvent PeekNamedPipe GetCurrencyFormatW FindNextVolumeA CreateActCtxA OpenJobObjectW GetPrivateProfileIntA _lread FreeEnvironmentStringsW SetVolumeMountPointW VirtualAlloc GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomA CopyFileW VerSetConditionMask EnumSystemLocalesW InterlockedFlushSList WritePrivateProfileSectionA GetStringTypeA CreateMutexW GetCurrentActCtx ReadFile MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesW InterlockedCompareExchange InterlockedExchange GetTickCount SetLastError lstrcpynA LoadLibraryW HeapAlloc GetStartupInfoW GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeW CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

Sharing