3a68f98ff16400570319ea20ee95ed7c[.]exe

General

Target
3a68f98ff16400570319ea20ee95ed7c.exe
Size 306KB
Sample230207-lvg2eaah78
SHA256 01a09f4a93941e4d0d1afabb4f49f7aa1b9f91cc202cc1d7eba5ca52ebecd317
MD5 3a68f98ff16400570319ea20ee95ed7c
SHA1 f224c44539adca907f74f21b050a2d837a0f7083
SHA512 dd6595901322800d2d3e19bf019ef8f744b8cfcee7a2bd1ca0a2bbb194b81d87a5a93e58ac136a3aa249455bd80958e8a29ce5d25338cce035e9cb762b0b624d
SSDEEP 6144:oHSjlDBLkgUqxFxqjVhbud58LFWYMyYkyKW:oHSjldwgUQqLE52FWYMyY
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

3a68f98ff16400570319ea20ee95ed7c.exe

.exe 306KB

3a68f98ff16400570319ea20ee95ed7c.exe

IMPHASH 01b655af6d395e5ede880ec579b9fddb
SHA256 01a09f4a93941e4d0d1afabb4f49f7aa1b9f91cc202cc1d7eba5ca52ebecd317
MD5 3a68f98ff16400570319ea20ee95ed7c
SHA1 f224c44539adca907f74f21b050a2d837a0f7083
SHA512 dd6595901322800d2d3e19bf019ef8f744b8cfcee7a2bd1ca0a2bbb194b81d87a5a93e58ac136a3aa249455bd80958e8a29ce5d25338cce035e9cb762b0b624d
SSDEEP 6144:oHSjlDBLkgUqxFxqjVhbud58LFWYMyYkyKW:oHSjldwgUQqLE52FWYMyY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31270

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RequestWakeupLatency CreateFileA FindActCtxSectionStringW WriteConsoleInputW LoadModule WriteFile FindFirstVolumeMountPointA CreateDirectoryExW GlobalSize WaitForMultipleObjectsEx ReadConsoleInputW GetCurrentProcess FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop LCMapStringW GetProcAddress GlobalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchange CreateMutexA GetConsoleTitleW SearchPathA FindResourceW FreeConsole EndUpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetComputerNameExA GetConsoleAliasW CreateSemaphoreW GlobalFlags GetConsoleAliasesLengthW FindResourceA SetVolumeMountPointA GetModuleHandleA HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeW EnumResourceLanguagesA _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA AddRefActCtx WritePrivateProfileStringW GetUserDefaultLangID QueryMemoryResourceNotification WaitForMultipleObjects GetLongPathNameA InterlockedCompareExchange VerifyVersionInfoW EnumCalendarInfoW FindNextFileW EnumTimeFormatsW SetLastError EnumTimeFormatsA GetConsoleAliasesLengthA SetCriticalSectionSpinCount WritePrivateProfileSectionW LoadLibraryA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetMenuBarInfo

gdi32

GetTextFaceA

Sharing