ee91bafa021858d2495d11be79bb66ee[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ee91bafa021858d2495d11be79bb66ee.exe
Size 196KB
Sample230122-vsj8esgf59
SHA256 5c4e05a0c7fcaa16fdcb3ce45e19b5706197d53bcc92329f883a0da3ddcbde9c
MD5 ee91bafa021858d2495d11be79bb66ee
SHA1 abf986a6d0a1ea7418d284b32ed86ef40f967d50
SHA512 b4319285e79382c02922b5a0f2159003cfb39f84d1b1f992072e81d0a5cbc93118d52dd272fce704c5e483e22bc10003ac3d3e1cdab0d7626dfc08141722a323
SSDEEP 6144:4mTXB6L274MydkpLEfV5pZijx+ssb2P2MfAx:tmEIfPpKx++26Ax
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ee91bafa021858d2495d11be79bb66ee.exe

.exe 196KB

ee91bafa021858d2495d11be79bb66ee.exe

IMPHASH 4ad169539e30f4fdc9cb467ca358dbdb
SHA256 5c4e05a0c7fcaa16fdcb3ce45e19b5706197d53bcc92329f883a0da3ddcbde9c
MD5 ee91bafa021858d2495d11be79bb66ee
SHA1 abf986a6d0a1ea7418d284b32ed86ef40f967d50
SHA512 b4319285e79382c02922b5a0f2159003cfb39f84d1b1f992072e81d0a5cbc93118d52dd272fce704c5e483e22bc10003ac3d3e1cdab0d7626dfc08141722a323
SSDEEP 6144:4mTXB6L274MydkpLEfV5pZijx+ssb2P2MfAx:tmEIfPpKx++26Ax
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32386

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW SetCommMask LocalUnlock GetSystemDefaultLangID GetConsoleAliasA TerminateProcess LocalFlags GetModuleHandleA GetConsoleAliasesLengthW GetSystemWindowsDirectoryW GetVolumePathNameW ProcessIdToSessionId OpenFileMappingW lstrcmpW DeleteTimerQueueTimer SetConsoleScreenBufferSize GetComputerNameW lstrcpynW GenerateConsoleCtrlEvent CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxA DeleteVolumeMountPointW MoveFileWithProgressW ResetEvent CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsA FindNextFileA VerifyVersionInfoA GetConsoleAliasW CreateFileA GetProcessPriorityBoost GetSystemTimeAdjustment GetConsoleTitleW GetNumberOfConsoleInputEvents GetVolumeNameForVolumeMountPointW LoadLibraryA CloseHandle HeapSize ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode RaiseException FlushFileBuffers SetStdHandle

user32

GetCaretBlinkTime

gdi32

GetBrushOrgEx GetBoundsRect

advapi32

AbortSystemShutdownW SetThreadToken InitiateSystemShutdownA

shell32

FindExecutableA

winhttp

WinHttpReadData

msimg32

AlphaBlend