ab28d926012b7cf54ea99eafe85e580b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ab28d926012b7cf54ea99eafe85e580b.exe
Size 322KB
Sample230402-klfasafd93
SHA256 b4ea2b4b198552bd5507a504480d1efe41343c84c317de4ed44f571f608c8d47
MD5 ab28d926012b7cf54ea99eafe85e580b
SHA1 b380a3b599700918032377f3c6ef363a7f365e37
SHA512 50142709444a34d4566d5cf3b070e5683e74ee83ddea45ee56657c6fcff16677759c24d79fb874414bf812c02aaba179a6812690bcb2269d9573152be143e870
SSDEEP 6144:g/ji2H5h8EvzoWdN46Jd6VWxtoloBV+rLx:Yb8EvbdN9JsVJ6BV+rLx
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ab28d926012b7cf54ea99eafe85e580b.exe

.exe 322KB

ab28d926012b7cf54ea99eafe85e580b.exe

IMPHASH 070e553ddabe88527fa952a08fb09ea6
SHA256 b4ea2b4b198552bd5507a504480d1efe41343c84c317de4ed44f571f608c8d47
MD5 ab28d926012b7cf54ea99eafe85e580b
SHA1 b380a3b599700918032377f3c6ef363a7f365e37
SHA512 50142709444a34d4566d5cf3b070e5683e74ee83ddea45ee56657c6fcff16677759c24d79fb874414bf812c02aaba179a6812690bcb2269d9573152be143e870
SSDEEP 6144:g/ji2H5h8EvzoWdN46Jd6VWxtoloBV+rLx:Yb8EvbdN9JsVJ6BV+rLx
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

18932

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

DPtoLP CreateFontIndirectW SelectObject DeleteObject RestoreDC CreateCompatibleDC CreateCompatibleBitmap CreateSolidBrush SetWindowOrgEx SetBkMode SetTextColor GetStockObject GetObjectA GetObjectW DeleteDC CreateBitmap SetLayout SetViewportOrgEx ModifyWorldTransform SetGraphicsMode SaveDC BitBlt GetDeviceCaps

user32

SetWindowLongPtrW DefWindowProcW GetWindowLongPtrW PostMessageW PostQuitMessage SendMessageW SetWindowTextW ShowWindow UpdateWindow GetMessageW TranslateMessage DispatchMessageW FindWindowExW IsWindow CallWindowProcW RegisterClassExW GetClassInfoExW LoadCursorW CreateWindowExW CharNextW RegisterWindowMessageW LoadIconW LoadImageW GetSystemMetrics PeekMessageW MsgWaitForMultipleObjectsEx DestroyIcon KillTimer LoadStringW GetDC ReleaseDC SetForegroundWindow UnregisterClassA SetTimer GetCursorPos CreatePopupMenu AppendMenuW SetMenuItemInfoW SetMenuDefaultItem TrackPopupMenu DestroyMenu BringWindowToTop GetSysColor SystemParametersInfoW GetWindowRect MapWindowPoints FillRect GetAncestor IsIconic GetLastActivePopup BeginPaint EndPaint MoveWindow InvalidateRect GetWindowLongW GetWindowTextW GetWindowTextLengthW DrawTextW IsWindowEnabled GetParent TrackMouseEvent SetRect ScreenToClient GetDlgItem SetFocus DestroyWindow GetScrollInfo SetScrollInfo ScrollWindowEx GetScrollPos SetScrollPos ScrollWindow GetFocus DrawIcon EnableWindow IsWindowVisible SendNotifyMessageW GetKeyState GetClientRect

msvcrt

free swprintf_s memcpy_s memmove_s malloc _vscwprintf wcsncpy_s vswprintf_s _wtof wcstol towupper wcsstr wcschr iswspace _resetstkoflw wcscat_s _vsnwprintf memcmp __CxxFrameHandler3 _onexit _lock __dllonexit memset _errno realloc ??1type_info@@UEAA@XZ ?terminate@@YAXXZ __set_app_type _fmode _commode __setusermatherr _amsg_exit _initterm _wcmdln exit _cexit _exit _XcptFilter __wgetmainargs _callnewh _CxxThrowException ??0exception@@QEAA@AEBV0@@Z ??1exception@@UEAA@XZ ?what@exception@@UEBAPEBDXZ ??0exception@@QEAA@AEBQEBDH@Z wcscpy_s __C_specific_handler _unlock memcpy

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind EtwUnregisterTraceGuids EtwRegisterTraceGuidsW EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwTraceMessage

gdiplus

GdiplusShutdown GdipAddPathArcI GdipClosePathFigure GdipCreateFromHDC GdipDeleteGraphics GdipSetSmoothingMode GdipCreateLineBrushFromRectI GdipDeleteBrush GdipFree GdipDrawPath GdipDrawImageRectI GdipCreateBitmapFromHICON GdipFillPath GdipDeletePath GdipCreatePath GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipCreateLineBrushFromRectWithAngleI GdipMeasureString GdipDeleteStringFormat GdipCreateStringFormat GdipDeleteFont GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipDrawImageRectRectI GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipCloneImage GdipLoadImageFromFile GdipFillRectangleI GdipAlloc GdiplusStartup

comctl32

ord344

kernel32

VirtualAlloc InterlockedPopEntrySList VirtualFree HeapSize HeapReAlloc HeapDestroy GetVersionExA DelayLoadFailureHook LoadLibraryExA GetSystemTimeAsFileTime LocalFree MoveFileExW WriteFile CreateFileW GetTempFileNameW GetTempPathW GetSystemDefaultLangID DeleteFileW GetTimeFormatW InterlockedPushEntrySList FileTimeToSystemTime FileTimeToLocalFileTime CheckElevationEnabled GetUserPreferredUILanguages SetProcessWorkingSetSize GetLocaleInfoW RegQueryValueExW FindResourceExW WaitForSingleObject CreateThread GlobalFree GetCommandLineW CreateProcessW FormatMessageW SetEvent CreateMutexW CreateEventW CloseHandle LoadLibraryExW MultiByteToWideChar RegDeleteValueW RegCreateKeyExW RegSetValueExW lstrcmpiW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey GetModuleHandleW LoadLibraryW GetProcAddress FreeLibrary DeleteCriticalSection InitializeCriticalSection GetLastError HeapSetInformation FindResourceW LoadResource LockResource SizeofResource GetUserDefaultUILanguage HeapFree GetProcessHeap HeapAlloc RaiseException SetLastError lstrlenW GetModuleFileNameW LeaveCriticalSection EnterCriticalSection GetCurrentThreadId FlushInstructionCache GetCurrentProcess Sleep GetStartupInfoW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetDateFormatW TerminateProcess UnhandledExceptionFilter OutputDebugStringA GetCurrentProcessId