b2fabf8e6cd2703ace9d85f6182b4b51[.]exe

General

Target
b2fabf8e6cd2703ace9d85f6182b4b51.exe
Size 731KB
Sample230106-l18rbabc8x
SHA256 e012b3a8b27a6facbcfb2f7f84257120e443bc2d3680477e388b382e431e4664
MD5 b2fabf8e6cd2703ace9d85f6182b4b51
SHA1 dc6371e4ebda8f90b6cf4421c18d46956ba8bd34
SHA512 db65a9c079e3bd7fb5f0d250244917b1c28a298c94f449aefca050f0c4421a02a67ab1bb59e15f7d0e3e517fbbcba4eb30f3cca1125e95c3717d7c187eb861c7
SSDEEP 12288:UoSc4BpcDknnvsZSVPPM44NimlB9enZdan25lQjLmB2RN4cQoTglhdPDQkx2JggI:UJpcDknvswYbre3YmcucQG4drQlu7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b2fabf8e6cd2703ace9d85f6182b4b51.exe

.exe 731KB

b2fabf8e6cd2703ace9d85f6182b4b51.exe

IMPHASH dfef7d0386798b1593a141c677df8ca7
SHA256 e012b3a8b27a6facbcfb2f7f84257120e443bc2d3680477e388b382e431e4664
MD5 b2fabf8e6cd2703ace9d85f6182b4b51
SHA1 dc6371e4ebda8f90b6cf4421c18d46956ba8bd34
SHA512 db65a9c079e3bd7fb5f0d250244917b1c28a298c94f449aefca050f0c4421a02a67ab1bb59e15f7d0e3e517fbbcba4eb30f3cca1125e95c3717d7c187eb861c7
SSDEEP 12288:UoSc4BpcDknnvsZSVPPM44NimlB9enZdan25lQjLmB2RN4cQoTglhdPDQkx2JggI:UJpcDknvswYbre3YmcucQG4drQlu7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24431

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateDirectoryExW ReadConsoleInputW GetTempPathW GetCurrentDirectoryW RemoveDirectoryW OutputDebugStringA GetProcAddress LocalAlloc GetBinaryTypeA SearchPathA VerifyVersionInfoA SetProcessPriorityBoost EndUpdateResourceA FindNextFileW FindFirstVolumeW LocalShrink GlobalFlags GetModuleHandleA UpdateResourceA CreateActCtxW CopyFileW InterlockedExchangeAdd MoveFileWithProgressA GetConsoleAliasW CreateMutexA DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExA CreateMailslotA WriteConsoleInputA TerminateThread GetCurrentProcess RtlCaptureContext InterlockedDecrement GetFileTime lstrcatA FindFirstFileW FreeEnvironmentStringsA SetErrorMode GetTickCount SetLastError GetPrivateProfileStructA VerSetConditionMask LoadLibraryA GetLastError DeleteFileA GetStartupInfoW HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException VirtualAlloc HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize CloseHandle CreateFileA

user32

GetComboBoxInfo

gdi32

SetBrushOrgEx

Sharing