46659078a8e155236eb59dce5f42baff[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
46659078a8e155236eb59dce5f42baff.exe
Size 349KB
Sample230128-cv98hsfc4t
SHA256 dc6226d88472e78b79c967c3d151400f1b6e69d7618efd430b64d35b2e20df2e
MD5 46659078a8e155236eb59dce5f42baff
SHA1 a3b16f6d9d4ca219114984fd5dc3b4a115f4e666
SHA512 6ca3a9fb9ae4755d17e53a8c43598dca906e8d458eec603bbb0f1c6fdef623c0f3cf4e701941878fc8b392f377aaf834e06ce935e1209959ef417a6e6e53dc66
SSDEEP 6144:DXp0yN90QEpMu4jfhblv9dOb06N+bWWIrN+4+AwkZ22QUKBHrz28WyKzHP7bug5:+y90XV4rhpvu06N+bWWIrN+4dwi229mE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

46659078a8e155236eb59dce5f42baff.exe

.exe 349KB

46659078a8e155236eb59dce5f42baff.exe

IMPHASH 1efe015ade03f54dd6d9b2ccea28b970
SHA256 dc6226d88472e78b79c967c3d151400f1b6e69d7618efd430b64d35b2e20df2e
MD5 46659078a8e155236eb59dce5f42baff
SHA1 a3b16f6d9d4ca219114984fd5dc3b4a115f4e666
SHA512 6ca3a9fb9ae4755d17e53a8c43598dca906e8d458eec603bbb0f1c6fdef623c0f3cf4e701941878fc8b392f377aaf834e06ce935e1209959ef417a6e6e53dc66
SSDEEP 6144:DXp0yN90QEpMu4jfhblv9dOb06N+bWWIrN+4+AwkZ22QUKBHrz28WyKzHP7bug5:+y90XV4rhpvu06N+bWWIrN+4dwi229mE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27600

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

GetTokenInformation RegDeleteValueA RegOpenKeyExA RegQueryInfoKeyA FreeSid OpenProcessToken RegSetValueExA RegCreateKeyExA LookupPrivilegeValueA AllocateAndInitializeSid RegQueryValueExA EqualSid RegCloseKey AdjustTokenPrivileges

kernel32

_lopen _llseek CompareStringA GetLastError GetFileAttributesA GetSystemDirectoryA LoadLibraryA DeleteFileA GlobalAlloc GlobalFree CloseHandle WritePrivateProfileStringA IsDBCSLeadByte GetWindowsDirectoryA SetFileAttributesA GetProcAddress GlobalLock LocalFree RemoveDirectoryA FreeLibrary _lclose CreateDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA GlobalUnlock ReadFile SizeofResource WriteFile GetDriveTypeA lstrcmpA SetFileTime SetFilePointer FindResourceA CreateMutexA GetVolumeInformationA WaitForSingleObject FindClose FreeResource GetVersion SetCurrentDirectoryA GetTempPathA LocalFileTimeToFileTime CreateFileA SetEvent TerminateThread GetVersionExA LockResource GetSystemInfo CreateThread ResetEvent LoadResource ExitProcess GetModuleHandleW CreateProcessA FormatMessageA GetTempFileNameA DosDateTimeToFileTime CreateEventA GetExitCodeProcess GetModuleFileNameA LocalAlloc MulDiv GetDiskFreeSpaceA EnumResourceLanguagesA GetTickCount GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleA TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetStartupInfoA Sleep ExpandEnvironmentStringsA FindNextFileA GetCurrentProcess GetCurrentDirectoryA FindFirstFileA GetShortPathNameA LoadLibraryExA

gdi32

GetDeviceCaps

user32

GetDlgItemTextA DialogBoxIndirectParamA ShowWindow MsgWaitForMultipleObjects SetWindowPos GetDC GetWindowRect DispatchMessageA GetDesktopWindow CharUpperA SetDlgItemTextA ExitWindowsEx MessageBeep EndDialog CharPrevA LoadStringA CharNextA EnableWindow ReleaseDC SetForegroundWindow PeekMessageA GetDlgItem SendMessageA SendDlgItemMessageA MessageBoxA SetWindowTextA GetWindowLongA CallWindowProcA GetSystemMetrics SetWindowLongA

msvcrt

?terminate@@YAXXZ _acmdln _controlfp _except_handler4_common _initterm __setusermatherr _ismbblead __p__fmode _cexit _exit exit __set_app_type __getmainargs _amsg_exit __p__commode _XcptFilter memcpy_s _vsnprintf memcpy memset

comctl32

ord17

cabinet

ord21 ord23 ord22 ord20

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA