44c9814d3dba7526300bfee720853ea2[.]exe

General

Target
44c9814d3dba7526300bfee720853ea2.exe
Size 145KB
Sample230330-vwer4sfa2t
SHA256 6fe218dea5435f56596a29a9d68614b9d4eb7615bb216897cced2d1aec586431
MD5 44c9814d3dba7526300bfee720853ea2
SHA1 ec239ce6d39a144a7a78aa623298e756548f1634
SHA512 ba2991eebcee48d92a8fcc3dd783791d8c3dd523aa98b8bfe3909587692c848874d4d703a9277428465c6d37a66333dad71bc6efa949b824932fa4e1606e36bd
SSDEEP 3072:ETCKOJL9+xhMcgMUzcuNJ6G7V5bnqouw1NckiTdI4O:EO5L9AWzb6mqoT8v
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

44c9814d3dba7526300bfee720853ea2.exe

.exe 145KB

44c9814d3dba7526300bfee720853ea2.exe

IMPHASH ebd9fa475638eafc424b8bc2eb84d2e7
SHA256 6fe218dea5435f56596a29a9d68614b9d4eb7615bb216897cced2d1aec586431
MD5 44c9814d3dba7526300bfee720853ea2
SHA1 ec239ce6d39a144a7a78aa623298e756548f1634
SHA512 ba2991eebcee48d92a8fcc3dd783791d8c3dd523aa98b8bfe3909587692c848874d4d703a9277428465c6d37a66333dad71bc6efa949b824932fa4e1606e36bd
SSDEEP 3072:ETCKOJL9+xhMcgMUzcuNJ6G7V5bnqouw1NckiTdI4O:EO5L9AWzb6mqoT8v
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19318

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoW FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetOEMCP GetQueuedCompletionStatus CopyFileW InterlockedPushEntrySList WriteConsoleA GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxA FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexW LocalFlags RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsW InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer lstrcpynW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoW HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing