ad7ad9ea4165831a7da49fca41b53007[.]exe

General

Target
ad7ad9ea4165831a7da49fca41b53007.exe
Size 327KB
Sample230126-qph4qsdg39
SHA256 050c2acd0f467ab6089c32fa9b0921bb1685ef697b6ef2ed7509db4e18eaff9e
MD5 ad7ad9ea4165831a7da49fca41b53007
SHA1 1a5bbe9111903b684ad7d9f34dc87c158eb120cf
SHA512 baec1d931c4af8dcf8746db54bd1640251be9a9822048ee9725bf5af556e3df7b4360d144ff044dba12beb52631367f3cdf563ac69657c0c2e07c238640f4602
SSDEEP 6144:LZLtVZK7qFHA5knDSAwtQK/fu1d0L+TVmTb:LZhVaoUknD6tQKXu1r
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ad7ad9ea4165831a7da49fca41b53007.exe

.exe 327KB

ad7ad9ea4165831a7da49fca41b53007.exe

IMPHASH 7973a61531c93981746e35cc3b7b0ae0
SHA256 050c2acd0f467ab6089c32fa9b0921bb1685ef697b6ef2ed7509db4e18eaff9e
MD5 ad7ad9ea4165831a7da49fca41b53007
SHA1 1a5bbe9111903b684ad7d9f34dc87c158eb120cf
SHA512 baec1d931c4af8dcf8746db54bd1640251be9a9822048ee9725bf5af556e3df7b4360d144ff044dba12beb52631367f3cdf563ac69657c0c2e07c238640f4602
SSDEEP 6144:LZLtVZK7qFHA5knDSAwtQK/fu1d0L+TVmTb:LZhVaoUknD6tQKXu1r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18047

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask FlushConsoleInputBuffer GetModuleHandleW ReadConsoleW GetWindowsDirectoryA GetGeoInfoW GetConsoleAliasExesW FindResourceExA LoadLibraryW GetNamedPipeInfo GetConsoleAliasW GetDevicePowerState IsBadStringPtrA LCMapStringA SetLastError lstrcmpiA GetProcAddress VirtualAlloc InterlockedIncrement BuildCommDCBW LoadLibraryA OpenWaitableTimerW LocalAlloc DnsHostnameToComputerNameA AddAtomW CreateEventW SetCommMask FreeEnvironmentStringsW VirtualProtect GetConsoleCursorInfo EndUpdateResourceA CreateWaitableTimerA GetConsoleProcessList EnumCalendarInfoExA LCMapStringW GetStringTypeW MultiByteToWideChar CreateFiber lstrlenA HeapSize SetPriorityClass GetLastError HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetLocaleInfoA WideCharToMultiByte GetStringTypeA

user32

GetCaretPos WindowFromDC GetMenuInfo GetCursorInfo

gdi32

GetCharWidthA

advapi32

BackupEventLogW

Name

.text

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

92KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.desadel

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pipufez

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.madakiw

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

164KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ad7ad9ea4165831a7da49fca41b53007.exe

kernel32

user32

gdi32

advapi32