6054129893e238730e31460e6924ce3b[.]exe

General

Target
6054129893e238730e31460e6924ce3b.exe
Size 2.0MB
Sample220124-hr3xxsdfck
SHA256 674f31aed8544f2f54423de908559f3d1964ef4f3391d2bf989915766b8c42e9
MD5 6054129893e238730e31460e6924ce3b
SHA1 6d98d3684fc38a448926bc7eaec38b0db20f2776
SHA512 dd20619cba6635d7ca8b6a6df0e003ac9824e7f379919006f928658dbd5d9412b94867c391b117d783e5e05fb1218a9ca9ba6cdefa718be83d9a96952659fcfc
SSDEEP 49152:0qbduUb481ECZXVZZagT+XG+vNRCVvNTAtwlAgZ+avT:XZap2eRCVvpIM+q
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6054129893e238730e31460e6924ce3b.exe

.exe 2.0MB

6054129893e238730e31460e6924ce3b.exe

IMPHASH 2ea46fd288209af535efaef075889460
SHA256 674f31aed8544f2f54423de908559f3d1964ef4f3391d2bf989915766b8c42e9
MD5 6054129893e238730e31460e6924ce3b
SHA1 6d98d3684fc38a448926bc7eaec38b0db20f2776
SHA512 dd20619cba6635d7ca8b6a6df0e003ac9824e7f379919006f928658dbd5d9412b94867c391b117d783e5e05fb1218a9ca9ba6cdefa718be83d9a96952659fcfc
SSDEEP 49152:0qbduUb481ECZXVZZagT+XG+vNRCVvNTAtwlAgZ+avT:XZap2eRCVvpIM+q
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9331

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo FindActCtxSectionGuid InterlockedDecrement SetMailslotInfo GetProfileSectionA GetComputerNameW SetEvent GetConsoleAliasesLengthA SetFileTime GetDateFormatA GlobalAlloc GetFirmwareEnvironmentVariableA SwitchToFiber Sleep DeleteVolumeMountPointW DnsHostnameToComputerNameW lstrcpynW GetAtomNameW RaiseException GetStringTypeExA LCMapStringA GetProcAddress VirtualAlloc PeekConsoleInputW RemoveDirectoryA SetStdHandle SetFileAttributesA LocalAlloc GetModuleFileNameA GetModuleHandleA SetLocaleInfoW GetConsoleTitleW ReadConsoleInputW GetConsoleProcessList lstrcpyW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess GetLastError WriteFile GetStdHandle SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer HeapFree CloseHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

winhttp

WinHttpOpen

Sharing