c0b1c3fbb46a37c556fad5d2ee13bf38[.]exe

General

Target
c0b1c3fbb46a37c556fad5d2ee13bf38.exe
Size 253KB
Sample230218-lc29mabc4x
SHA256 bd6d05a0b508e5bfc4c8d4a2c9bd7b307638986e460c160378bd5d98cd5850aa
MD5 c0b1c3fbb46a37c556fad5d2ee13bf38
SHA1 ee63027bbc7fb43b51f859a9a454a5910c446f39
SHA512 115acc0d2d507b203893285faa0701ec3edb1319374ed287199ef033c8e86a3fb6fe9f55ffdb4920f3b661883bac4ff3aa6ebdbebf940ffee22b440bf0e78d83
SSDEEP 3072:GbtnW2XHLXpELuqboo4g+ZvyNAK7UvlwwlTf3bHPV8dv:olW23LsucvyVdTrHw
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

c0b1c3fbb46a37c556fad5d2ee13bf38.exe

.exe 253KB

c0b1c3fbb46a37c556fad5d2ee13bf38.exe

IMPHASH e04960f092e2c265d9974e72e467f4d5
SHA256 bd6d05a0b508e5bfc4c8d4a2c9bd7b307638986e460c160378bd5d98cd5850aa
MD5 c0b1c3fbb46a37c556fad5d2ee13bf38
SHA1 ee63027bbc7fb43b51f859a9a454a5910c446f39
SHA512 115acc0d2d507b203893285faa0701ec3edb1319374ed287199ef033c8e86a3fb6fe9f55ffdb4920f3b661883bac4ff3aa6ebdbebf940ffee22b440bf0e78d83
SSDEEP 3072:GbtnW2XHLXpELuqboo4g+ZvyNAK7UvlwwlTf3bHPV8dv:olW23LsucvyVdTrHw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26831

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo WriteConsoleInputA MoveFileWithProgressA GetCurrentThread GetConsoleAliasesA GetGeoInfoW GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW GetVersionExW DeleteVolumeMountPointW GetFileAttributesA GetMailslotInfo CreateActCtxA GetBinaryTypeW GetACP InterlockedExchange GetLastError GetProcAddress VirtualAlloc RemoveDirectoryA FreeUserPhysicalPages GetNumaHighestNodeNumber PrepareTape WriteConsoleA UnhandledExceptionFilter GetProcessWorkingSetSize InterlockedExchangeAdd OpenWaitableTimerW IsSystemResumeAutomatic GetNumberFormatW GetDiskFreeSpaceA OpenJobObjectW SetConsoleCursorInfo GetModuleHandleA HeapSetInformation EraseTape GetStringTypeW GetConsoleTitleW FatalAppExitA SetFileShortNameA GetCurrentProcessId InitializeCriticalSectionAndSpinCount LoadLibraryA HeapReAlloc GetLocaleInfoA MultiByteToWideChar TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapAlloc HeapFree Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA LeaveCriticalSection EnterCriticalSection

user32

GetClipCursor SetCaretPos GetKeyNameTextW CharUpperW RealGetWindowClassW IsChild LoadMenuA GetCursorInfo CharLowerBuffW CharUpperBuffA

ole32

ReadClassStg CoUninitialize

winhttp

WinHttpCheckPlatform

Sharing