04ca884d1642ba6051f501ca5c66375a[.]exe

General

Target
04ca884d1642ba6051f501ca5c66375a.exe
Size 394KB
Sample230228-tk8elscb35
SHA256 8b08628b3b7ad95bef5be23120ed741dcfca5d30f0d2dfdf83166b94c56f15d1
MD5 04ca884d1642ba6051f501ca5c66375a
SHA1 ca1f3a4503b3f9c9e765fd9a23e3513a13030a94
SHA512 cb046de26c7fe1f4dcb34c1683415fd83fe18777dc8b88d534a6a09f262e2ea1d2ae7187e0d91d4f9a4f8d7a94e7a7740335de274f85e36d978bc7947f4e97c3
SSDEEP 6144:UQ5LTyBvrHTRCReZEqnZFzuk0v9o7rH0RFj1:UMPyBvrHURmEWZFD01PR
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

04ca884d1642ba6051f501ca5c66375a.exe

.exe 394KB

04ca884d1642ba6051f501ca5c66375a.exe

IMPHASH 2ff441a58ff638ca2d2b64ce6ffa9559
SHA256 8b08628b3b7ad95bef5be23120ed741dcfca5d30f0d2dfdf83166b94c56f15d1
MD5 04ca884d1642ba6051f501ca5c66375a
SHA1 ca1f3a4503b3f9c9e765fd9a23e3513a13030a94
SHA512 cb046de26c7fe1f4dcb34c1683415fd83fe18777dc8b88d534a6a09f262e2ea1d2ae7187e0d91d4f9a4f8d7a94e7a7740335de274f85e36d978bc7947f4e97c3
SSDEEP 6144:UQ5LTyBvrHTRCReZEqnZFzuk0v9o7rH0RFj1:UMPyBvrHURmEWZFD01PR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18443

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetModuleHandleExW FreeEnvironmentStringsA GetModuleHandleW FindNextVolumeMountPointA GetConsoleAliasesA FormatMessageA SetHandleCount FindResourceExA GlobalAlloc GetConsoleAliasExesLengthW GetFileAttributesA WriteConsoleW GetBinaryTypeA GetStringTypeExA EnumSystemLocalesA SetLastError GetProcAddress VirtualAlloc LoadLibraryA CreateSemaphoreW InterlockedExchangeAdd WriteProfileSectionW EnumDateFormatsA GetStringTypeW RequestWakeupLatency GetVersionExA LocalSize FindAtomW GetWindowsDirectoryW GetPrivateProfileSectionW DebugBreak CloseHandle CreateFileA GetConsoleOutputCP WriteConsoleA EndUpdateResourceW OpenJobObjectA LockFileEx Sleep ExitProcess GetStartupInfoW HeapAlloc GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind HeapSize GetLocaleInfoA RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA

user32

LoadIconW LoadMenuW RedrawWindow CharLowerBuffA GetSysColorBrush GetMenuInfo GetCaretBlinkTime

gdi32

GetTextExtentPointI

advapi32

ReportEventW

Sharing