a8d37b89536bbf20a1d9bad2e16851b0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a8d37b89536bbf20a1d9bad2e16851b0.exe
Size 161KB
Sample230222-rcplesca35
SHA256 ef55ccbcd896514df881410c71c4f5bfc27d49ccfb4a5eaad9107d53f0ac817f
MD5 a8d37b89536bbf20a1d9bad2e16851b0
SHA1 975e8aad19912d9f1e990e8481123130da5d18c7
SHA512 b1d8870100872420b43d2cec8f2ae920691efc756b76a51aaa0f812c5bdef38eaf4cb90ea72de41dc98319eea54212e8ef135afe24f27932093b283aa1100c72
SSDEEP 1536:NOnSdXiXR+RGyFnE4Afxdt8bGD7QwPVzVnBrUHXUXSgCFop5ULizReUP3m658HvQ:NOS6+QrpZzfUg5mU8HBHRToedp1UGv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

a8d37b89536bbf20a1d9bad2e16851b0.exe

.exe 161KB

a8d37b89536bbf20a1d9bad2e16851b0.exe

IMPHASH 15c60e75bc829640466cb2d348a32c55
SHA256 ef55ccbcd896514df881410c71c4f5bfc27d49ccfb4a5eaad9107d53f0ac817f
MD5 a8d37b89536bbf20a1d9bad2e16851b0
SHA1 975e8aad19912d9f1e990e8481123130da5d18c7
SHA512 b1d8870100872420b43d2cec8f2ae920691efc756b76a51aaa0f812c5bdef38eaf4cb90ea72de41dc98319eea54212e8ef135afe24f27932093b283aa1100c72
SSDEEP 1536:NOnSdXiXR+RGyFnE4Afxdt8bGD7QwPVzVnBrUHXUXSgCFop5ULizReUP3m658HvQ:NOS6+QrpZzfUg5mU8HBHRToedp1UGv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22466

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW GetWindowsDirectoryW FindFirstVolumeMountPointA FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputW VerifyVersionInfoW GetVersionExA OpenEventW CreateFileMappingA SetLocaleInfoW GetProcAddress LocalAlloc SetConsoleTitleW DeleteFileW EnumResourceTypesA GetLongPathNameA LoadLibraryW GetBinaryTypeA SetLastError GetProfileSectionA WriteProfileStringA CreateFileW GetConsoleAliasW WriteProfileSectionA DeleteVolumeMountPointA GetModuleHandleA EnumResourceLanguagesA SetDefaultCommConfigA EnumDateFormatsW SetVolumeMountPointW WritePrivateProfileStringA GetSystemDirectoryW ReleaseActCtx GetStringTypeW GetShortPathNameA VerifyVersionInfoA FindNextFileW EnumCalendarInfoW GlobalAlloc AddRefActCtx GetCurrentActCtx WriteConsoleW HeapReAlloc GetComputerNameExW LoadLibraryA RtlUnwind FlushFileBuffers MultiByteToWideChar GetLastError WideCharToMultiByte HeapFree DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode HeapSize

user32

LoadMenuA GetMessagePos

advapi32

RevertToSelf

shell32

CommandLineToArgvW

ole32

CoGetInstanceFromFile