02e8c7af3724ff535da627197920ad14[.]exe

Target
02e8c7af3724ff535da627197920ad14.exe
Size 1.2MB
Sample240417-skhzaade44
SHA256 ed801a3e54843afe989aadd69cdab5e6fbf00e8e02742f354519b4b16de8f31c
MD5 02e8c7af3724ff535da627197920ad14
SHA1 794bd6f52a9673e1146321fa2545c580858c0d5f
SHA512 8a8710ffced04c30f5c43c71ebcbcf56f7b096836f67d1a847db4a8df4f39e291f3e7119f45f03fa1ca0abd0021f81abd31bb775fa22fe2340c1cf24f19f2555
SSDEEP 24576:XHtrdKYVVSrqGDohJ3STZG8vIn/sCBGnWsY0Dyk:XHtV7GwBSTc8An/4YFk
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

02e8c7af3724ff535da627197920ad14.exe

.exe 1.2MB

02e8c7af3724ff535da627197920ad14.exe

IMPHASH b90027f65707ca9644c551e337fa02ad
SHA256 ed801a3e54843afe989aadd69cdab5e6fbf00e8e02742f354519b4b16de8f31c
MD5 02e8c7af3724ff535da627197920ad14
SHA1 794bd6f52a9673e1146321fa2545c580858c0d5f
SHA512 8a8710ffced04c30f5c43c71ebcbcf56f7b096836f67d1a847db4a8df4f39e291f3e7119f45f03fa1ca0abd0021f81abd31bb775fa22fe2340c1cf24f19f2555
SSDEEP 24576:XHtrdKYVVSrqGDohJ3STZG8vIn/sCBGnWsY0Dyk:XHtV7GwBSTc8An/4YFk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

3c:51:f5:11:5a:95:18:14:9f:36:5b:a1:54:a9:42:b5:c7:20:23:cb:f2:80:ea:a4:29:19:7d:92:a6:bf:77:e6

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=OCVZWWJW

Chains

Feb 27, 2019

Minor OS version

Major OS version

Entry point

1128544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeW GetSystemDefaultLCID GetSystemTimeAsFileTime GetThreadLocale GetThreadPriority GetTickCount GetUserDefaultUILanguage GetVersionExA GetVersionExW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFlags GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock Heap32ListNext HeapAlloc HeapCreate HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection InitializeCriticalSectionAndSpinCount InterlockedDecrement InterlockedExchange InterlockedIncrement IsDebuggerPresent IsValidCodePage LCMapStringA LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryW LoadResource LocalAlloc LocalFree LocalReAlloc LocalSize LockResource MapViewOfFile MultiByteToWideChar OpenEventW OpenMutexW OpenSemaphoreA GetStringTypeExW OutputDebugStringA QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ReleaseMutex ReplaceFileA RtlUnwind SetComputerNameExA SetConsoleCtrlHandler SetConsoleMode SetConsoleOutputCP SetConsoleTextAttribute SetErrorMode SetEvent SetFilePointer SetHandleCount SetLastError SetStdHandle SetThreadLocale SetUnhandledExceptionFilter SetVolumeMountPointW SizeofResource Sleep SystemTimeToFileTime TerminateProcess TerminateThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VerLanguageNameA VirtualAlloc VirtualFree WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteConsoleA WriteConsoleW WriteFile WritePrivateProfileStringW _lwrite lstrcmpA lstrcmpW lstrlenA lstrlenW GetStringTypeA GetStdHandle GetStartupInfoW GetStartupInfoA GetShortPathNameW GetProcessHeaps GetProcessHeap GetProcAddress GetOEMCP GetModuleHandleW GetModuleHandleA GetModuleFileNameW GetModuleFileNameA GetLocaleInfoW GetLocaleInfoA GetLocalTime GetLastError GetFileType GetExitCodeThread GetEnvironmentStringsW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetConsoleScreenBufferInfo GetConsoleOutputCP GetConsoleMode GetConsoleFontSize GetConsoleCP GetComputerNameW GetCommandLineW GetCPInfo GetACP FreeLibrary FreeEnvironmentStringsW FormatMessageW FlushFileBuffers FindResourceW FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime ExitProcess EnumResourceLanguagesW EnterCriticalSection DeleteCriticalSection CreateThread CreateMutexW CreateMutexA CreateFileW CreateFileMappingW CreateFileA CreateEventW ConvertDefaultLocale OpenThread CloseHandle

user32

GrayStringW IsIconic IsWindow IsWindowEnabled IsWindowVisible LoadBitmapW LoadCursorW LoadIconW LoadMenuW LoadStringW MapWindowPoints MessageBoxA MessageBoxW ModifyMenuW MsgWaitForMultipleObjectsEx NotifyWinEvent PeekMessageW PostMessageW PostQuitMessage PostThreadMessageA PostThreadMessageW PtInRect RegisterClassW RegisterWindowMessageW ReleaseDC RemovePropW SendMessageA SendMessageW SetCursor SetForegroundWindow SetMenu SetMenuItemBitmaps SetMessageQueue SetPropW SetWindowLongW SetWindowPos SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA TabbedTextOutW TranslateMessage UnhookWinEvent UnhookWindowsHookEx UnregisterClassW UnregisterDeviceNotification ValidateRect WinHelpW WindowFromDC LoadCursorFromFileA GetClipboardData InSendMessage IsMenu DestroyIcon CharLowerW GetMenuContextHelpId VkKeyScanA CountClipboardFormats IsCharAlphaA IsCharAlphaNumericA GetProcessWindowStation IsWindowUnicode GetKeyboardLayout VkKeyScanW GetKBCodePage GetClipboardOwner GetAsyncKeyState DestroyCursor CloseClipboard PaintDesktop GetInputState GetCursor CloseDesktop ReleaseCapture EnumClipboardFormats GetWindowContextHelpId GetWindowTextLengthA GetClipboardViewer GetThreadDesktop IsCharAlphaW AnyPopup CharUpperW IsCharLowerW IsClipboardFormatAvailable GetQueueStatus CloseWindow GetDialogBaseUnits OemKeyScan CharNextA LoadIconA GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindow GetTopWindow GetSystemMetrics GetSysColorBrush GetSysColor GetSubMenu GetScrollPos GetPropW GetParent GetMessageW GetMessageTime GetMessagePos GetMessageExtraInfo GetMenuState GetMenuItemID GetMenuItemCount GetMenuCheckMarkDimensions GetMenu GetLastActivePopup GetKeyState GetForegroundWindow GetFocus GetDlgItem GetDlgCtrlID GetDC GetCursorPos GetClientRect GetClassLongW GetClassInfoW GetClassInfoExW GetCapture GetActiveWindow EnableWindow EnableMenuItem EmptyClipboard DrawTextW DrawTextExW DispatchMessageW DestroyWindow DestroyMenu DefWindowProcW DefWindowProcA DdeQueryConvInfo CreateWindowExW CreateDialogParamW CopyRect ClientToScreen CheckMenuItem CharToOemW CharNextW CharLowerA CallWindowProcW CallNextHookEx AdjustWindowRectEx GetClassNameW

gdi32

CreateSolidBrush SaveDC FlattenPath GdiGetBatchLimit AbortDoc GetStockObject GetLayout GetBkColor GdiFlush CreateHalftonePalette GetSystemPaletteUse GetObjectType DeleteObject AddFontResourceW EngQueryLocalTime GetPolyFillMode GetGraphicsMode AbortPath DeleteColorSpace CreateCompatibleDC UnrealizeObject GetDCPenColor UpdateColors CreatePatternBrush StrokePath SwapBuffers GetTextCharset XLATEOBJ_cGetPalette XFORMOBJ_iGetXform StartDocW SetWindowExtEx SetTextColor GetTextColor GetICMProfileW GetCharABCWidthsA GdiStartDocEMF GdiDllInitialize GetColorSpace CopyMetaFileW EngLoadModule DPtoLP EngReleaseSemaphore

advapi32

RegSetValueExA RegQueryValueW RegQueryValueExW RegQueryValueExA RegOpenKeyW RegOpenKeyExW RegOpenKeyExA RegEnumKeyW RegDeleteKeyW RegCreateKeyExW RegCreateKeyExA RegCloseKey RegSetValueExW

shlwapi

PathFindFileNameW PathFindExtensionW

Resubmissions

Sharing

General