222a4945a6837304d2f7fd06ad87346a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
222a4945a6837304d2f7fd06ad87346a.exe
Size 320KB
Sample230112-kg44cabc91
SHA256 4e7715976bd2f7409a107ed08179d8634d072f28082fa6ab7940d4f3d43ccf24
MD5 222a4945a6837304d2f7fd06ad87346a
SHA1 230616109257111af299168389ea94c622c9d90a
SHA512 56c04e18642ebd182a35981fd2213779d697b8e70804bc0b077d5b050d02bf8e38aef21717792c9374dd893deb76f15b27b8832dbfa487cdb175a26765d0a718
SSDEEP 6144:mHZsK5gXqUfE8gkr1tAVjqzAP3Zi5pyixFzk:GZ5gXxc8gkrTi3Zi/yi8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

222a4945a6837304d2f7fd06ad87346a.exe

.exe 320KB

222a4945a6837304d2f7fd06ad87346a.exe

IMPHASH cc224966c0ebf7118ef643f039d26f9d
SHA256 4e7715976bd2f7409a107ed08179d8634d072f28082fa6ab7940d4f3d43ccf24
MD5 222a4945a6837304d2f7fd06ad87346a
SHA1 230616109257111af299168389ea94c622c9d90a
SHA512 56c04e18642ebd182a35981fd2213779d697b8e70804bc0b077d5b050d02bf8e38aef21717792c9374dd893deb76f15b27b8832dbfa487cdb175a26765d0a718
SSDEEP 6144:mHZsK5gXqUfE8gkr1tAVjqzAP3Zi5pyixFzk:GZ5gXxc8gkrTi3Zi/yi8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25743

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW EnumCalendarInfoExW GetProcessHeap ReadConsoleW TlsSetValue GetSystemWindowsDirectoryA LeaveCriticalSection DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW WriteConsoleW GetConsoleFontSize MultiByteToWideChar IsBadStringPtrA GetTempPathW lstrcmpiA VirtualAlloc SetComputerNameA LoadLibraryA SetCommMask EnumDateFormatsA SetConsoleCursorInfo FreeEnvironmentStringsW BuildCommDCBA GetFileAttributesExW EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA FindActCtxSectionStringW OpenFileMappingA LCMapStringW GetCurrentProcess InterlockedIncrement FindResourceExW GetProcAddress RemoveVectoredExceptionHandler GetConsoleOutputCP WriteConsoleA ReadFile GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile

user32

WindowFromDC

gdi32

GetCharWidthA

advapi32

IsTokenRestricted DeregisterEventSource ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend