23964533872a512c4815e4d38f7c27f9[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
23964533872a512c4815e4d38f7c27f9.exe
Size 306KB
Sample230313-ld69zabf6v
SHA256 43d161b14bb015230d35be049a680853dd2967cd232f42016d724efb0971ae55
MD5 23964533872a512c4815e4d38f7c27f9
SHA1 145b03c309b8ae46f8c81a094b9da0f66863acfe
SHA512 995e34f7a940af5f3d723d9e52e8802e487eaf8f44a9264b6ea658be42b16b7f760b162587a09718cbb20d319c1f5f5f438446a8a6f7f22249481ccd6006bcd0
SSDEEP 3072:yN3bttiL7kUIaRqSCJhv7n/FoRh9yyo+bAc5dNvVaDAlEB0P9sxA76ov3LqMRUT:iniLAzNSGv7/G3AcPaDa5uk6oj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

23964533872a512c4815e4d38f7c27f9.exe

.exe 306KB

23964533872a512c4815e4d38f7c27f9.exe

IMPHASH 13dc564127b9f6b618808536c7e12f68
SHA256 43d161b14bb015230d35be049a680853dd2967cd232f42016d724efb0971ae55
MD5 23964533872a512c4815e4d38f7c27f9
SHA1 145b03c309b8ae46f8c81a094b9da0f66863acfe
SHA512 995e34f7a940af5f3d723d9e52e8802e487eaf8f44a9264b6ea658be42b16b7f760b162587a09718cbb20d319c1f5f5f438446a8a6f7f22249481ccd6006bcd0
SSDEEP 3072:yN3bttiL7kUIaRqSCJhv7n/FoRh9yyo+bAc5dNvVaDAlEB0P9sxA76ov3LqMRUT:iniLAzNSGv7/G3AcPaDa5uk6oj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23699

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceExW EndUpdateResourceW GetCommState ReadConsoleA GetCurrentProcess SetHandleInformation GetWindowsDirectoryA GetDateFormatA SetProcessPriorityBoost GlobalAlloc IsProcessInJob CreateSemaphoreA GetGeoInfoA GetTempPathW LCMapStringA InterlockedExchange lstrcpynA GetProcAddress VirtualAlloc EnumSystemCodePagesW SetTimerQueueTimer LoadLibraryA GetProcessWorkingSetSize BuildCommDCBAndTimeoutsW QueryDosDeviceW GetCommMask AddAtomA FoldStringW FoldStringA GetModuleHandleA BuildCommDCBA ReadConsoleInputW SetLocaleInfoA IsBadStringPtrW GetLastError GetComputerNameA LCMapStringW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte

user32

LoadMenuA GetListBoxInfo

gdi32

GetTextExtentExPointW

advapi32

ReportEventW

ole32

WriteClassStg

Name

.text

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

91KB

Virtual Size

183KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.huker

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rawemaj

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

153KB

Virtual Size

153KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ