bd1deb82ba2140eae3299f419783bab0

General

Target
bd1deb82ba2140eae3299f419783bab0
Size 670KB
Sample220120-pf2daahhhj
SHA256 b31474d8c16181a103a6ac36d9277eb7ac5dbb7261cfa74f82adbc8b2d06d3fa
MD5 bd1deb82ba2140eae3299f419783bab0
SHA1 f124c0e4ad7be58a85271f74b8c9e5d671d70aba
SHA512 458d1039347120665ccc01489e3185e660b442b4e47dab534d5591e5aabd2473eaa5d8f0710c0c3aeebf28ccc95007529357add14bae6d8b212789cae06bc846
SSDEEP 12288:EVhdKDXjhMlyC/az7EP8p3Vr6FRGwFiGm+Qzq+7c:sOX9MlyJnEPeGFkHGm+QNc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bd1deb82ba2140eae3299f419783bab0

.exe 670KB

bd1deb82ba2140eae3299f419783bab0

IMPHASH b7a0d2a66e86e27ee741e32de65d65f8
SHA256 b31474d8c16181a103a6ac36d9277eb7ac5dbb7261cfa74f82adbc8b2d06d3fa
MD5 bd1deb82ba2140eae3299f419783bab0
SHA1 f124c0e4ad7be58a85271f74b8c9e5d671d70aba
SHA512 458d1039347120665ccc01489e3185e660b442b4e47dab534d5591e5aabd2473eaa5d8f0710c0c3aeebf28ccc95007529357add14bae6d8b212789cae06bc846
SSDEEP 12288:EVhdKDXjhMlyC/az7EP8p3Vr6FRGwFiGm+Qzq+7c:sOX9MlyJnEPeGFkHGm+QNc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

10188

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement SetMailslotInfo GetProfileSectionA GetComputerNameW GetTimeFormatA SetEvent SleepEx GetModuleHandleW GetCurrentThread GetConsoleAliasesLengthA GetConsoleTitleA CreateRemoteThread FindActCtxSectionStringA ReadConsoleInputA GetStringTypeExW GetFileAttributesW SetLocaleInfoA GetOverlappedResult SetConsoleTitleA LCMapStringA GetLongPathNameW GetProcAddress VirtualAlloc SetStdHandle GetAtomNameA UnhandledExceptionFilter LocalAlloc DnsHostnameToComputerNameA GetModuleFileNameA GetModuleHandleA GetConsoleTitleW GetFileTime GetProfileSectionW lstrcpyW SetUnhandledExceptionFilter GetLastError HeapReAlloc HeapAlloc GetStartupInfoW EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind Sleep ExitProcess WriteFile SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapFree CloseHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CreateFileA ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA FlushFileBuffers RaiseException WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEndOfFile GetProcessHeap LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

advapi32

ReportEventA

winhttp

WinHttpSetDefaultProxyConfiguration

Sharing

General

Malware Config

Signatures

File Explorer

bd1deb82ba2140eae3299f419783bab0

kernel32

advapi32

winhttp