f5ad238dcb26458e74e5a4a5368ef20e[.]exe

General

Target
f5ad238dcb26458e74e5a4a5368ef20e.exe
Size 179KB
Sample230213-ckj9cahe5x
SHA256 ec41706892fae7e46bc01072c9bd80aa0329ae826a45119a514493b04bfb2a3a
MD5 f5ad238dcb26458e74e5a4a5368ef20e
SHA1 636f629fe013fe03d02568e40dad81c60f0a5417
SHA512 666f7409505cf65fa6feebe5606c16df46b65bac785e5eecaae80648cb8f1fb09270b6e5fce489e2558e417c0af641e19b55f21ad26cee687e46aed15354bbe1
SSDEEP 3072:HZ1A8fP635XhqxqDIZN1zj4RRfPvMwuhZx:HX9P6BEYaTzER1HMwu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

f5ad238dcb26458e74e5a4a5368ef20e.exe

.exe 179KB

f5ad238dcb26458e74e5a4a5368ef20e.exe

IMPHASH 1ec118ddc3b50693168adb7f3df7b684
SHA256 ec41706892fae7e46bc01072c9bd80aa0329ae826a45119a514493b04bfb2a3a
MD5 f5ad238dcb26458e74e5a4a5368ef20e
SHA1 636f629fe013fe03d02568e40dad81c60f0a5417
SHA512 666f7409505cf65fa6feebe5606c16df46b65bac785e5eecaae80648cb8f1fb09270b6e5fce489e2558e417c0af641e19b55f21ad26cee687e46aed15354bbe1
SSDEEP 3072:HZ1A8fP635XhqxqDIZN1zj4RRfPvMwuhZx:HX9P6BEYaTzER1HMwu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19546

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetTickCount GetCommConfig GetCurrentThread GetNumberFormatA GetGeoInfoW GlobalAlloc LoadLibraryW ReadConsoleInputA DeleteVolumeMountPointW HeapCreate GetMailslotInfo GetSystemDirectoryA CreateActCtxA GetBinaryTypeW GetTempPathW GetStartupInfoA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc DisableThreadLibraryCalls ProcessIdToSessionId GetProcessWorkingSetSize CreateEventW FindFirstChangeNotificationA ContinueDebugEvent HeapSetInformation GetConsoleTitleW RequestWakeupLatency GetVersionExA GetCurrentProcessId ReadConsoleOutputCharacterW LCMapStringW GetLocaleInfoA GetStringTypeW GetStringTypeA MultiByteToWideChar GetNumberOfConsoleMouseButtons InterlockedIncrement FindFirstVolumeMountPointW CopyFileExW LCMapStringA InitializeCriticalSectionAndSpinCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA

user32

IsCharAlphaNumericA DestroyAcceleratorTable RealChildWindowFromPoint IsMenu GetKeyNameTextA NotifyWinEvent RealGetWindowClassA LoadMenuA GetCursorInfo CharUpperW CharLowerBuffA ClipCursor

advapi32

ReportEventA DeregisterEventSource IsValidAcl LogonUserA

ole32

CoRegisterMallocSpy

Sharing