b3a58e6362ab9bb522206ca83778b84e[.]exe

General

Target
b3a58e6362ab9bb522206ca83778b84e.exe
Size 187KB
Sample230212-vs48laeg3x
SHA256 ea4e804e68f2593d3ada18fe9e5cf26754e6a5349e862d77028911d3ac613333
MD5 b3a58e6362ab9bb522206ca83778b84e
SHA1 82a0dd0d8d5194b23a7fbe30c90ba2ecd2d52a3a
SHA512 1fd1a2f52ea08108ebfb26fb24b86a60a4d98d32955cbdea6708dbbbed2dcfdbb4f266bfa8c5c9239a23ee31885253435aea2a8ae4d068bf51cc3754e9a7030a
SSDEEP 3072:u7mD+rGx7FW56HpJA6pA+ah5+QcCFfYh6N6ioHdk:wALdHnDm+ahLfFQBio9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b3a58e6362ab9bb522206ca83778b84e.exe

.exe 187KB

b3a58e6362ab9bb522206ca83778b84e.exe

IMPHASH ea0c0f223b6ece290ece4f678a133da5
SHA256 ea4e804e68f2593d3ada18fe9e5cf26754e6a5349e862d77028911d3ac613333
MD5 b3a58e6362ab9bb522206ca83778b84e
SHA1 82a0dd0d8d5194b23a7fbe30c90ba2ecd2d52a3a
SHA512 1fd1a2f52ea08108ebfb26fb24b86a60a4d98d32955cbdea6708dbbbed2dcfdbb4f266bfa8c5c9239a23ee31885253435aea2a8ae4d068bf51cc3754e9a7030a
SSDEEP 3072:u7mD+rGx7FW56HpJA6pA+ah5+QcCFfYh6N6ioHdk:wALdHnDm+ahLfFQBio9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24594

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement GetNumberOfConsoleMouseButtons GetModuleHandleW GetCommConfig GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetThreadPriorityBoost GetBinaryTypeW GetTempPathW GetStartupInfoA GetLastError SetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize GetNumberOfConsoleInputEvents FindFirstVolumeMountPointW GetNumberFormatW CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar CopyFileExW GetNativeSystemInfo SetThreadContext DosDateTimeToFileTime LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA GetFocus LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

winhttp

WinHttpOpen

Sharing