f9fe4c4fff80753edd31197511063ac4[.]exe

General

Target
f9fe4c4fff80753edd31197511063ac4.exe
Size 432KB
Sample230421-gnlc2aed66
SHA256 bc5de7ed331b9ff5f10a4f73dc79b99622410930fab1b76340505a150ff4877c
MD5 f9fe4c4fff80753edd31197511063ac4
SHA1 5b7c093563b95f799738cac2341bc1fecb4a754d
SHA512 79cf6b45b42c565a2a7b3bbe0dce796616b96d7f604b2a64337280a160fa57fccf631cdd8f3cb73535761739f093b867501cb9fd07072b6faba273bbb14d263d
SSDEEP 6144:PjOxnWUfVaSQT42V3FXeS1CdyhC1JnZDp47+K/FRVI9XBCmR:PjqWU9aVUYFrCd2OKd/FRGVb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

f9fe4c4fff80753edd31197511063ac4.exe

.exe 432KB

f9fe4c4fff80753edd31197511063ac4.exe

IMPHASH 85a564fb49e125ed724e4cc138258faf
SHA256 bc5de7ed331b9ff5f10a4f73dc79b99622410930fab1b76340505a150ff4877c
MD5 f9fe4c4fff80753edd31197511063ac4
SHA1 5b7c093563b95f799738cac2341bc1fecb4a754d
SHA512 79cf6b45b42c565a2a7b3bbe0dce796616b96d7f604b2a64337280a160fa57fccf631cdd8f3cb73535761739f093b867501cb9fd07072b6faba273bbb14d263d
SSDEEP 6144:PjOxnWUfVaSQT42V3FXeS1CdyhC1JnZDp47+K/FRVI9XBCmR:PjqWU9aVUYFrCd2OKd/FRGVb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41872

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalCompact SetUnhandledExceptionFilter GetConsoleAliasA InterlockedDecrement GetEnvironmentStringsW SetComputerNameW GetProcessPriorityBoost GetModuleHandleW GetTickCount FindNextVolumeMountPointA GetConsoleAliasesLengthA GetDriveTypeA GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsProcessInJob GetConsoleAliasExesLengthW GetFileAttributesW GetModuleFileNameW GetVolumePathNameA GetStringTypeExA GetNamedPipeHandleStateW EnumCalendarInfoA GetProcAddress CreateJobSet RemoveDirectoryA PrepareTape Process32FirstW LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA EnumResourceTypesW FindNextFileA FreeEnvironmentStringsW WaitForDebugEvent SetFileShortNameA DeleteFileW GetConsoleProcessList EnumSystemLocalesW CreateFileW WriteConsoleW FlushFileBuffers InterlockedFlushSList CreateMutexW InterlockedIncrement EncodePointer DecodePointer Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW SetConsoleCtrlHandler FreeLibrary SetStdHandle GetConsoleMode DeleteFileA

user32

DefDlgProcA GetMenuBarInfo

advapi32

ReportEventW

Sharing