fa90a0d3eda74437273dd23d8e9ca8e8[.]exe

General

Target
fa90a0d3eda74437273dd23d8e9ca8e8.exe
Size 304KB
Sample230207-xemgqsdc26
SHA256 621606f23b6d2a7e300cc4785f35fe8235b60604fb2c988470bf8971b57360e2
MD5 fa90a0d3eda74437273dd23d8e9ca8e8
SHA1 6fcf6cfb3ce6daed7c13e9af899640c17b2e6b77
SHA512 76697009b21e0b06eba51989ab210e894e2a30fc32a701b19af0b226372ef09d2609ef3a360bfefdcc0131b449ae68d52ffd82bf7fab40b54882ea48be57912b
SSDEEP 6144:WryLl/t7LnStnj7AZYKoyjhrsu/bLwL6wvxlNlDrwTHlygs:WryhF7zSt3WoyjiuzLwL6GxlH3gHl
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

fa90a0d3eda74437273dd23d8e9ca8e8.exe

.exe 304KB

fa90a0d3eda74437273dd23d8e9ca8e8.exe

IMPHASH 87e1f4e32d01d5a52e605f27fd138118
SHA256 621606f23b6d2a7e300cc4785f35fe8235b60604fb2c988470bf8971b57360e2
MD5 fa90a0d3eda74437273dd23d8e9ca8e8
SHA1 6fcf6cfb3ce6daed7c13e9af899640c17b2e6b77
SHA512 76697009b21e0b06eba51989ab210e894e2a30fc32a701b19af0b226372ef09d2609ef3a360bfefdcc0131b449ae68d52ffd82bf7fab40b54882ea48be57912b
SSDEEP 6144:WryLl/t7LnStnj7AZYKoyjhrsu/bLwL6wvxlNlDrwTHlygs:WryhF7zSt3WoyjiuzLwL6GxlH3gHl
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29279

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RequestWakeupLatency CreateFileA FindActCtxSectionStringA WriteConsoleInputA ClearCommBreak WriteFile FindFirstVolumeMountPointW CreateDirectoryExA LocalSize WaitForMultipleObjects ReadConsoleInputA GetProcessId FreeUserPhysicalPages WriteConsoleOutputAttribute DebugActiveProcessStop GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeW InterlockedExchange OpenMutexW GetConsoleTitleA SearchPathA FreeConsole EndUpdateResourceA GetLastError GetProfileSectionA SetConsoleCursorInfo GetConsoleAliasW CreateSemaphoreA GlobalFlags GetConsoleAliasesLengthA FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesA SetHandleInformation _hwrite CreateActCtxA DeleteVolumeMountPointA MoveFileWithProgressA AddRefActCtx WritePrivateProfileStringA GetUserDefaultLangID QueryMemoryResourceNotification WaitForSingleObject GetLongPathNameW InterlockedDecrement VerifyVersionInfoA EnumCalendarInfoW FindNextFileW EnumTimeFormatsA SetLastError SetCriticalSectionSpinCount WritePrivateProfileSectionA LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

gdi32

GetTextFaceW

Sharing