94b5e686a97900aa3b37e4b91bc1f527[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
94b5e686a97900aa3b37e4b91bc1f527.exe
Size 273KB
Sample230405-m19jaadc49
SHA256 e98666fc150e5d345ed957a4755bcb23529d17977c8da9920faaff25003f561d
MD5 94b5e686a97900aa3b37e4b91bc1f527
SHA1 8a4e96d9f9489a73ad49ac56e61e879111b0dd4c
SHA512 685a0e45f28b6abbcc6190f3bdbf88cd9e09dbce93a553d9ea946aa0b63721c3f9d6f4246e2c59f6ab8bca0317d6a79b6b503950b7cec307fdf00e5b7dfb7b72
SSDEEP 3072:tQX+w/80EWdxNbHsu3VjCEN4MLm857pkV+Pyb586hkg45sYUYsxTw:yXp80VNbHBoQfL7++Py986vYUYiT
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

94b5e686a97900aa3b37e4b91bc1f527.exe

.exe 273KB

94b5e686a97900aa3b37e4b91bc1f527.exe

IMPHASH 7e3b1e18e4b8642ee42be6e8ca53a819
SHA256 e98666fc150e5d345ed957a4755bcb23529d17977c8da9920faaff25003f561d
MD5 94b5e686a97900aa3b37e4b91bc1f527
SHA1 8a4e96d9f9489a73ad49ac56e61e879111b0dd4c
SHA512 685a0e45f28b6abbcc6190f3bdbf88cd9e09dbce93a553d9ea946aa0b63721c3f9d6f4246e2c59f6ab8bca0317d6a79b6b503950b7cec307fdf00e5b7dfb7b72
SSDEEP 3072:tQX+w/80EWdxNbHsu3VjCEN4MLm857pkV+Pyb586hkg45sYUYsxTw:yXp80VNbHBoQfL7++Py986vYUYiT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24136

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState ReadConsoleA WaitNamedPipeA SetFirmwareEnvironmentVariableA CreateJobObjectW InterlockedCompareExchange FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA SetCommState TlsSetValue FindResourceExA LoadLibraryW GetConsoleMode GetVersionExW GetConsoleAliasW HeapValidate SetConsoleCursorPosition GetFileAttributesW GetMailslotInfo GetStringTypeExA GetCPInfoExW GetLastError VerSetConditionMask BackupRead GetProcAddress VirtualAlloc RemoveDirectoryA SetStdHandle LocalAlloc WritePrivateProfileStringA AddAtomW BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleHandleA OpenEventW QueryPerformanceFrequency GetShortPathNameW GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak CommConfigDialogW DeleteFileA InterlockedIncrement DeleteVolumeMountPointA GetProfileIntW MoveFileExA InterlockedFlushSList GetSystemDefaultLangID CreateFileA WriteConsoleW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA RtlUnwind RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetConsoleCP FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

CharLowerBuffW

gdi32

GetCharacterPlacementW SelectPalette GetTextExtentExPointA GetCharWidthI

advapi32

MapGenericMask

shell32

CommandLineToArgvW