37a99217fd1c1d002506c4bb8cc8bc8e[.]exe

General

Target
37a99217fd1c1d002506c4bb8cc8bc8e.exe
Size 398KB
Sample230123-xdg6maef99
SHA256 9cfdc5f11ab2c97fd116b930b1e20d51ecb607efdbbb106811bdfb3288a0b82a
MD5 37a99217fd1c1d002506c4bb8cc8bc8e
SHA1 89e2405df89889129a279efa86894e711ea37f57
SHA512 c549ca55474945ebb442dc65c1701bacb0639a8dc6ef4bc15e2e7ad47de1f5f22a4ee12a5afeec0dfab8b5b7e0a0acd374de44c91fcd6aa5385a53008468be76
SSDEEP 6144:zmLeVjjs7ExFE1qcrYJclWdT9z59dDLOtQK/fu1d0amTbV:zmiVXUExmYJXdDytQKXu1J
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

37a99217fd1c1d002506c4bb8cc8bc8e.exe

.exe 398KB

37a99217fd1c1d002506c4bb8cc8bc8e.exe

IMPHASH 7973a61531c93981746e35cc3b7b0ae0
SHA256 9cfdc5f11ab2c97fd116b930b1e20d51ecb607efdbbb106811bdfb3288a0b82a
MD5 37a99217fd1c1d002506c4bb8cc8bc8e
SHA1 89e2405df89889129a279efa86894e711ea37f57
SHA512 c549ca55474945ebb442dc65c1701bacb0639a8dc6ef4bc15e2e7ad47de1f5f22a4ee12a5afeec0dfab8b5b7e0a0acd374de44c91fcd6aa5385a53008468be76
SSDEEP 6144:zmLeVjjs7ExFE1qcrYJclWdT9z59dDLOtQK/fu1d0amTbV:zmiVXUExmYJXdDytQKXu1J
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18031

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask FlushConsoleInputBuffer GetModuleHandleW ReadConsoleW GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW FindResourceExA LoadLibraryW GetNamedPipeInfo GetConsoleAliasW GetDevicePowerState IsBadStringPtrA LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc InterlockedIncrement BuildCommDCBW LoadLibraryA OpenWaitableTimerW LocalAlloc DnsHostnameToComputerNameA AddAtomW CreateEventW SetCommMask FreeEnvironmentStringsW VirtualProtect GetConsoleCursorInfo EndUpdateResourceA CreateWaitableTimerA GetConsoleProcessList EnumCalendarInfoExA LCMapStringW GetStringTypeW MultiByteToWideChar CreateFiber lstrlenA HeapSize SetPriorityClass GetLastError HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetLocaleInfoA WideCharToMultiByte GetStringTypeA

user32

GetCaretPos WindowFromDC GetMenuInfo GetCursorInfo

gdi32

GetCharWidthA

advapi32

BackupEventLogW

Name

.text

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

160KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mewo

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rupa

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buci

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

166KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

37a99217fd1c1d002506c4bb8cc8bc8e.exe

kernel32

user32

gdi32

advapi32