c9a04f74a6fccdd73cdaef10f65c357a[.]exe

General

Target
c9a04f74a6fccdd73cdaef10f65c357a.exe
Size 335KB
Sample230202-hmg5nafd39
SHA256 8fb600b8f74db4b37a558ede015e4b8fd93ac52ea5439f48d74cfab53e32490a
MD5 c9a04f74a6fccdd73cdaef10f65c357a
SHA1 bfb30e0ed7a5abbed0ff6842bb84a23e61d8d747
SHA512 89e920a26cae1e50c971dc0a66509584b8a59707e89e5c951a779b89fc0d3b187c5a9a4381c66d584cc9d24e0b538e5113952bb46a65f3a68c833bd9601d0c83
SSDEEP 6144:aTm3lYLu+bhxGHkv4usj/ZlntgYlrV+n+BCIWCF2R:aTqO6+bhQHkYhlntgYlh++nRF2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

c9a04f74a6fccdd73cdaef10f65c357a.exe

.exe 335KB

c9a04f74a6fccdd73cdaef10f65c357a.exe

IMPHASH 5b3e1365fd24e4232cba105b88665e84
SHA256 8fb600b8f74db4b37a558ede015e4b8fd93ac52ea5439f48d74cfab53e32490a
MD5 c9a04f74a6fccdd73cdaef10f65c357a
SHA1 bfb30e0ed7a5abbed0ff6842bb84a23e61d8d747
SHA512 89e920a26cae1e50c971dc0a66509584b8a59707e89e5c951a779b89fc0d3b187c5a9a4381c66d584cc9d24e0b538e5113952bb46a65f3a68c833bd9601d0c83
SSDEEP 6144:aTm3lYLu+bhxGHkv4usj/ZlntgYlrV+n+BCIWCF2R:aTqO6+bhQHkYhlntgYlh++nRF2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30335

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW ReadFile AddAtomA CreateFileW SystemTimeToFileTime FindActCtxSectionStringA GetCommProperties GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA LocalSize GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchangeAdd ReadConsoleOutputCharacterW CreateMutexW GetConsoleTitleA SearchPathA ExpandEnvironmentStringsW FindResourceW FormatMessageA GetModuleHandleA EndUpdateResourceA GetLastError SetCommMask GlobalReAlloc TerminateThread LocalFlags GetConsoleAliasesLengthW GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleWindowInfo CopyFileA DosDateTimeToFileTime QueryDosDeviceW CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringA WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW EnumDateFormatsW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibrary CreateFileA SetStdHandle TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer

user32

GetMessageTime

msimg32

AlphaBlend

Sharing