19ca8bec[.]exe | Triage™

General

Target
19ca8bec.exe
Size 212KB
Sample230412-a3333agd88
SHA256 805a64c1ec03d02bf8e8ebe48a9c59fe520c573cafc01bf3ef2b6dd965b1a12a
MD5 7c23e95b985b899963a9fadfba9ae9a3
SHA1 a8f4047d10ee9fbd92620c6a4682ff4862877061
SHA512 c038b071899965192016e0bd1ceebc220d32718f3d7986f709ec293b77b758939a21d5924660a32037d269a621d0acf845b5d8167e8f051f72ab3e0de8f78b31
SSDEEP 3072:4lFr+KjVr+kAvDlf4SOrb2BfZeExg3QqPwc8LsamG1mEa5NbnWeJ:AR+KIkAvFf6CBfZzeQqximqmE+bnWe
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

19ca8bec.exe

.exe 212KB

19ca8bec.exe

IMPHASH b81caf9645c283582db7fbe3519ee19d
SHA256 805a64c1ec03d02bf8e8ebe48a9c59fe520c573cafc01bf3ef2b6dd965b1a12a
MD5 7c23e95b985b899963a9fadfba9ae9a3
SHA1 a8f4047d10ee9fbd92620c6a4682ff4862877061
SHA512 c038b071899965192016e0bd1ceebc220d32718f3d7986f709ec293b77b758939a21d5924660a32037d269a621d0acf845b5d8167e8f051f72ab3e0de8f78b31
SSDEEP 3072:4lFr+KjVr+kAvDlf4SOrb2BfZeExg3QqPwc8LsamG1mEa5NbnWeJ:AR+KIkAvFf6CBfZzeQqximqmE+bnWe
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20308

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID AddConsoleAliasW FindCloseChangeNotification BackupSeek FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW VirtualFree ConvertFiberToThread ReadConsoleW EnumTimeFormatsW EnumResourceTypesA SetHandleCount LoadLibraryW SetCommConfig GetConsoleWindow GetVersionExW GetFileAttributesW EnumSystemLocalesA InterlockedExchange GetProfileIntA SetThreadLocale GetCPInfoExW QueryPerformanceCounter GetLastError GetProcAddress VirtualAlloc HeapSize BeginUpdateResourceW RemoveDirectoryA LoadLibraryA LocalAlloc OpenEventA PostQueuedCompletionStatus WriteProfileSectionW FoldStringA EnumDateFormatsA GetModuleHandleA HeapSetInformation GetConsoleTitleW VirtualProtect ScrollConsoleScreenBufferA GetShortPathNameW GetWindowsDirectoryW DebugBreak InterlockedDecrement FillConsoleOutputCharacterW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection RtlUnwind GetStdHandle GetFileType DeleteCriticalSection RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc CloseHandle CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap MultiByteToWideChar ReadFile LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthA GetCharWidthI

Sharing