07931444ab0b5e9cfcd3e3a8b47ac92c[.]exe

General

Target
07931444ab0b5e9cfcd3e3a8b47ac92c.exe
Size 329KB
Sample230123-kr6d6aec2w
SHA256 343edd312c42dc22e7c6529efb3dfeb7acbd6004859672b8920e5203264bc97d
MD5 07931444ab0b5e9cfcd3e3a8b47ac92c
SHA1 e7beb2fd9333e22933ffd0dfc70ffecee54c9cbe
SHA512 dc609116bcbb9f3c85be45d9bb85e2f2aa5b639098232c311ab67de750b9535b5047e367b4d9af631cb20721cc75ca4583b45c72bf60f32c1a6d379346b9e342
SSDEEP 6144:sKLU5T6BeIwdklHVdztQK/fu1d0LmTbV:sKw52BeNdKH7tQKXu1A
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

07931444ab0b5e9cfcd3e3a8b47ac92c.exe

.exe 329KB

07931444ab0b5e9cfcd3e3a8b47ac92c.exe

IMPHASH 7973a61531c93981746e35cc3b7b0ae0
SHA256 343edd312c42dc22e7c6529efb3dfeb7acbd6004859672b8920e5203264bc97d
MD5 07931444ab0b5e9cfcd3e3a8b47ac92c
SHA1 e7beb2fd9333e22933ffd0dfc70ffecee54c9cbe
SHA512 dc609116bcbb9f3c85be45d9bb85e2f2aa5b639098232c311ab67de750b9535b5047e367b4d9af631cb20721cc75ca4583b45c72bf60f32c1a6d379346b9e342
SSDEEP 6144:sKLU5T6BeIwdklHVdztQK/fu1d0LmTbV:sKw52BeNdKH7tQKXu1A
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18047

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask FlushConsoleInputBuffer GetModuleHandleW ReadConsoleW GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW FindResourceExA LoadLibraryW GetNamedPipeInfo GetConsoleAliasW GetDevicePowerState IsBadStringPtrA LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc InterlockedIncrement BuildCommDCBW LoadLibraryA OpenWaitableTimerW LocalAlloc DnsHostnameToComputerNameA AddAtomW CreateEventW SetCommMask FreeEnvironmentStringsW VirtualProtect GetConsoleCursorInfo EndUpdateResourceA CreateWaitableTimerA GetConsoleProcessList EnumCalendarInfoExA LCMapStringW GetStringTypeW MultiByteToWideChar CreateFiber lstrlenA HeapSize SetPriorityClass GetLastError HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetLocaleInfoA WideCharToMultiByte GetStringTypeA

user32

GetCaretPos WindowFromDC GetMenuInfo GetCursorInfo

gdi32

GetCharWidthA

advapi32

BackupEventLogW

Name

.text

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

91KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gucav

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lema

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.somini

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

166KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

07931444ab0b5e9cfcd3e3a8b47ac92c.exe

kernel32

user32

gdi32

advapi32