b2fc5646c3292b627c06e946125911bb[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b2fc5646c3292b627c06e946125911bb.exe
Size 429KB
Sample230112-tweaxagf78
SHA256 ae0d7c4bad7e8699d8a1004ac5995f3ff4c889254c3813f8a3aefed23e0bfa08
MD5 b2fc5646c3292b627c06e946125911bb
SHA1 9fcd0e15403c8192f2f5f521e5c5e23cf4c4d12a
SHA512 8e76b456ab78c46e65902c77f83889f5b20465ffa056cfb1b3991e3def4af1f24e3e20565ac65e4ae1cc31d38a873c048790bdc3fa7ff3362181cb9d33e49cee
SSDEEP 6144:MwTw363U27AhWX8wYw9wt1pueF2yCrv3iQxlWtIThX9yDqCFrtY6:M+JU27AwX8wEtXu+2fraYhkOCVtY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b2fc5646c3292b627c06e946125911bb.exe

.exe 429KB

b2fc5646c3292b627c06e946125911bb.exe

IMPHASH 62f628538e3c61be2e3186663f4b6cfe
SHA256 ae0d7c4bad7e8699d8a1004ac5995f3ff4c889254c3813f8a3aefed23e0bfa08
MD5 b2fc5646c3292b627c06e946125911bb
SHA1 9fcd0e15403c8192f2f5f521e5c5e23cf4c4d12a
SHA512 8e76b456ab78c46e65902c77f83889f5b20465ffa056cfb1b3991e3def4af1f24e3e20565ac65e4ae1cc31d38a873c048790bdc3fa7ff3362181cb9d33e49cee
SSDEEP 6144:MwTw363U27AhWX8wYw9wt1pueF2yCrv3iQxlWtIThX9yDqCFrtY6:M+JU27AwX8wEtXu+2fraYhkOCVtY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28199

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetProcessHeap EnumResourceTypesA TlsSetValue GetPriorityClass LoadLibraryW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA SetConsoleCursorPosition GetFileAttributesW WriteConsoleW GetConsoleFontSize MultiByteToWideChar GetTempPathW LCMapStringA SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA DnsHostnameToComputerNameA SetCommMask EnumDateFormatsA SetConsoleCursorInfo lstrcmpiW GetModuleHandleA GetFileAttributesExW GetCPInfoExA EndUpdateResourceA GlobalAddAtomW AddConsoleAliasA FindActCtxSectionStringW OpenFileMappingA SetFirmwareEnvironmentVariableA SetComputerNameW InterlockedIncrement IsBadStringPtrW BuildCommDCBW RemoveVectoredExceptionHandler GetConsoleOutputCP SetEndOfFile FlushFileBuffers GetLastError HeapFree HeapAlloc GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ReadFile SetHandleCount GetFileType SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA SetStdHandle GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

WindowFromDC

gdi32

GetCharWidthFloatW

advapi32

NotifyChangeEventLog IsTokenRestricted ClearEventLogA

winhttp

WinHttpSetDefaultProxyConfiguration

msimg32

TransparentBlt