2f7b2c10938ab9ca1776812cc7a78cd7[.]exe

General

Target
2f7b2c10938ab9ca1776812cc7a78cd7.exe
Size 195KB
Sample230222-nffadabb33
SHA256 99214eef940ee226b982bd31ffa9a9fc6cfea3c3e79d0902a1e1ba726eb7b9bd
MD5 2f7b2c10938ab9ca1776812cc7a78cd7
SHA1 563a3671c6fce20fe3967fbf201ecf07f97dc572
SHA512 36a1f2877cc880100de469e5d65f8958cfd426fbe31ee4ffeb03cc8b63d003a75dc423e8b9f588a1c228e21184c8d75abde06170cc3e047e02fe5d7cd1dca080
SSDEEP 3072:CZ4fTRLBdvl8xkfHkFiUmWZ5bmcXswd3eK2Sy7AxBVZiVa9wVA:+4fTRLNwDAUmAaasCOKRNiVwC
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2f7b2c10938ab9ca1776812cc7a78cd7.exe

.exe 195KB

2f7b2c10938ab9ca1776812cc7a78cd7.exe

IMPHASH ba19c5d833d8f89c60a2bc026207e7c3
SHA256 99214eef940ee226b982bd31ffa9a9fc6cfea3c3e79d0902a1e1ba726eb7b9bd
MD5 2f7b2c10938ab9ca1776812cc7a78cd7
SHA1 563a3671c6fce20fe3967fbf201ecf07f97dc572
SHA512 36a1f2877cc880100de469e5d65f8958cfd426fbe31ee4ffeb03cc8b63d003a75dc423e8b9f588a1c228e21184c8d75abde06170cc3e047e02fe5d7cd1dca080
SSDEEP 3072:CZ4fTRLBdvl8xkfHkFiUmWZ5bmcXswd3eK2Sy7AxBVZiVa9wVA:+4fTRLNwDAUmAaasCOKRNiVwC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21955

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA GetCPInfo GetConsoleAliasExesLengthA DeleteVolumeMountPointA OpenJobObjectA GetModuleHandleExW InterlockedCompareExchange WriteConsoleInputA GetConsoleAliasesA GetWindowsDirectoryA GetUserDefaultLangID CreateActCtxW SetFileShortNameW _hread GetCalendarInfoA GetVersionExW LeaveCriticalSection GetFileAttributesA lstrcpynW WriteConsoleW GetBinaryTypeA SetThreadPriority InterlockedExchange GetLastError BackupRead GetProcAddress VirtualAlloc RemoveDirectoryA GetDiskFreeSpaceW OpenWaitableTimerA LoadLibraryA UnhandledExceptionFilter LocalAlloc SetProcessWorkingSetSize FindAtomA Module32FirstW GetModuleHandleA GetStringTypeW GetConsoleTitleW LocalSize GetCurrentProcessId GetFileInformationByHandle GetLocaleInfoA GetStringTypeA LCMapStringW WideCharToMultiByte MultiByteToWideChar GetStartupInfoW HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime EnterCriticalSection HeapReAlloc RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA

user32

LoadMenuA CharUpperW CopyAcceleratorTableW RealGetWindowClassW CharUpperBuffW GetKeyNameTextA GetCursorInfo LoadIconA CharLowerBuffW SetCaretPos

ole32

CoGetPSClsid OleQueryLinkFromData

Sharing