a4aed7853d05c6eaa0c15223d2ee6a7d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a4aed7853d05c6eaa0c15223d2ee6a7d.exe
Size 257KB
Sample230222-nffadabb34
SHA256 5931fac14fecb22cacb5cd495e2b49ead9bd6354ca9678257a5bc7929395db98
MD5 a4aed7853d05c6eaa0c15223d2ee6a7d
SHA1 6aebc644cb0e6b69da544bb71d75db25a25bc49a
SHA512 faadc4c9a57af4b5d19c266aa4fdce8a1de504ee42826a3e06a8c1ae7e7f2c2b038391c3c367b516a8e893828681e2ffcce276554be3717ca6f0a7636517593f
SSDEEP 6144:T30L8gAsu+mlkpRV6UyjFg5L1a0sZq01Z:L048ukpREBg5LbsJT
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a4aed7853d05c6eaa0c15223d2ee6a7d.exe

.exe 257KB

a4aed7853d05c6eaa0c15223d2ee6a7d.exe

IMPHASH 61084082e3ba31c8feb1b1c41020622a
SHA256 5931fac14fecb22cacb5cd495e2b49ead9bd6354ca9678257a5bc7929395db98
MD5 a4aed7853d05c6eaa0c15223d2ee6a7d
SHA1 6aebc644cb0e6b69da544bb71d75db25a25bc49a
SHA512 faadc4c9a57af4b5d19c266aa4fdce8a1de504ee42826a3e06a8c1ae7e7f2c2b038391c3c367b516a8e893828681e2ffcce276554be3717ca6f0a7636517593f
SSDEEP 6144:T30L8gAsu+mlkpRV6UyjFg5L1a0sZq01Z:L048ukpREBg5LbsJT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22141

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCPInfo GetConsoleAliasExesLengthA DeleteVolumeMountPointA EndUpdateResourceW MoveFileExW GlobalSize GetModuleHandleExW InterlockedCompareExchange WriteConsoleInputA FindNextVolumeMountPointA GetWindowsDirectoryA GetUserDefaultLangID CreateActCtxW Sleep GetVersionExW CreateSemaphoreA GetFileAttributesW GetBinaryTypeA GetThreadPriorityBoost CreateJobObjectA GetConsoleAliasesW InterlockedExchange GetLastError GetProcAddress VirtualAlloc EnterCriticalSection GetDiskFreeSpaceW OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc RemoveDirectoryW QueryDosDeviceW SetProcessWorkingSetSize OpenJobObjectW FindAtomA Module32FirstW GetModuleHandleA GetStringTypeW EnumDateFormatsW SetFileShortNameA GetVersionExA GetCurrentProcessId GetFileInformationByHandle CreateFileA CloseHandle GetModuleHandleW ExitProcess GetStartupInfoW HeapAlloc HeapFree LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapReAlloc RaiseException SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA FlushFileBuffers SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA

user32

CharLowerBuffW CopyAcceleratorTableA LoadIconW GetCursorInfo SetCaretPos LoadMenuA

Name

.text

Size

73KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

136KB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zisi

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xepa

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cipoya

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.homo

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ