a5361650167413f415d66abb245b8557[.]exe

General

Target
a5361650167413f415d66abb245b8557.exe
Size 292KB
Sample230214-3dphlagd5v
SHA256 e9c489e19f7466eb5509102f0eabe682e0cdc835bdeb22fd2eaacb8742705767
MD5 a5361650167413f415d66abb245b8557
SHA1 6779fb5c0d20145525abc4e0d630d961951f1d6c
SHA512 a8a12e853bdc4125a8b6103b12d6af5e4537a5b149f513eacd868e7bf06b14f3606d9ffa7fb92fe9ab2cb26c016d012a3cebd9f4309936b7b5abc2b2fa028082
SSDEEP 6144:5LyMgOwJTCEozIBliYx2aKkwWScYIftIRO8NkBx:5+M4J+EMy4YMaKDWjYIFIRO8
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a5361650167413f415d66abb245b8557.exe

.exe 292KB

a5361650167413f415d66abb245b8557.exe

IMPHASH f3f91ab88cd7f7832f622d1dea42a33f
SHA256 e9c489e19f7466eb5509102f0eabe682e0cdc835bdeb22fd2eaacb8742705767
MD5 a5361650167413f415d66abb245b8557
SHA1 6779fb5c0d20145525abc4e0d630d961951f1d6c
SHA512 a8a12e853bdc4125a8b6103b12d6af5e4537a5b149f513eacd868e7bf06b14f3606d9ffa7fb92fe9ab2cb26c016d012a3cebd9f4309936b7b5abc2b2fa028082
SSDEEP 6144:5LyMgOwJTCEozIBliYx2aKkwWScYIftIRO8NkBx:5+M4J+EMy4YMaKDWjYIFIRO8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19656

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SystemTimeToFileTime SetMailslotInfo GetFileAttributesExA MoveFileWithProgressA GetModuleHandleW GetTickCount GetCurrentThread GetGeoInfoW GetSystemDirectoryW ReadConsoleInputA CreateEventA GetBinaryTypeA GetMailslotInfo CreateActCtxA GetACP GetStartupInfoA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc DisableThreadLibraryCalls LoadLibraryA InterlockedIncrement UnhandledExceptionFilter GetProcessWorkingSetSize LocalAlloc IsSystemResumeAutomatic GetNumberFormatW RemoveDirectoryW GetModuleHandleA FindFirstChangeNotificationA HeapSetInformation GetConsoleTitleW GetVersionExA GetCurrentProcessId GetTempPathA LCMapStringW CopyFileExA InitializeCriticalSectionAndSpinCount HeapSize DeleteVolumeMountPointA GetNumaProcessorNode FillConsoleOutputCharacterA HeapReAlloc MultiByteToWideChar TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetCPInfo InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapAlloc HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW LeaveCriticalSection EnterCriticalSection GetLocaleInfoA

user32

GetKeyNameTextW IsChild RealGetWindowClassA LoadMenuA CharUpperA GetCursorInfo CharLowerBuffA ClipCursor

advapi32

LogonUserW IsValidAcl ReportEventA

ole32

CoRegisterMallocSpy

Sharing