6233d8b9604bf1c3997feff9618f8109[.]exe

General

Target
6233d8b9604bf1c3997feff9618f8109.exe
Size 444KB
Sample220126-pcltesdab6
SHA256 6e9b7fb1fffe85b5bc6b20d031c3b48f5964d504b4e37df2624e5982c5ba3875
MD5 6233d8b9604bf1c3997feff9618f8109
SHA1 0a17264ead7a0b8727cc69f5f2991357a23b9a17
SHA512 9bcee5569fac925aa7ed734b1a64ff974e134fd8162b5c5f94537113b297f058a4549b427b9b9b0c7f410154b05a7ee9051ec6d1c039da9944af3a124af7c0ed
SSDEEP 12288:P4wXQ2t/cypBwNZyeyUEPpgVKQD8tixwiuuTQjV+F:Q1poBwN4RzRgVpQ4xkum+
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6233d8b9604bf1c3997feff9618f8109.exe

.exe 444KB

6233d8b9604bf1c3997feff9618f8109.exe

IMPHASH 4bcde812b040ca4f517d950272a8fa16
SHA256 6e9b7fb1fffe85b5bc6b20d031c3b48f5964d504b4e37df2624e5982c5ba3875
MD5 6233d8b9604bf1c3997feff9618f8109
SHA1 0a17264ead7a0b8727cc69f5f2991357a23b9a17
SHA512 9bcee5569fac925aa7ed734b1a64ff974e134fd8162b5c5f94537113b297f058a4549b427b9b9b0c7f410154b05a7ee9051ec6d1c039da9944af3a124af7c0ed
SSDEEP 12288:P4wXQ2t/cypBwNZyeyUEPpgVKQD8tixwiuuTQjV+F:Q1poBwN4RzRgVpQ4xkum+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

78624

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateNamedPipeW TerminateThread DeactivateActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleCP GetDefaultCommConfigW FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA SetCurrentDirectoryW GetLongPathNameA TlsGetValue SetComputerNameExA FindAtomA BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryA GlobalAlloc TryEnterCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA CopyFileW ZombifyActCtx OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalUnWire GetProcessHeap GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringA WriteProfileSectionW GetProfileStringW GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugBreak GetPrivateProfileSectionW ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW TerminateProcess GlobalFindAtomA FindCloseChangeNotification CreateActCtxW SetMailslotInfo InterlockedExchange DefineDosDeviceA FindVolumeMountPointClose EndUpdateResourceA WriteConsoleA GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA GetFileAttributesExA FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock lstrcmpW GetComputerNameW FindActCtxSectionStringA SetThreadContext MoveFileExA GlobalUnlock UnregisterWait BuildCommDCBA GlobalDeleteAtom GetBinaryTypeA OpenEventW SetCommTimeouts WaitNamedPipeA FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA FreeEnvironmentStringsA GetProcAddress CreateIoCompletionPort GetPrivateProfileSectionNamesA SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry SetSystemTime GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputA TransactNamedPipe GetCommState _lopen ResetWriteWatch GetConsoleOutputCP GetModuleHandleA EnumDateFormatsW LockFile GetConsoleAliasExesLengthA WriteConsoleOutputCharacterW HeapReAlloc OpenMutexA GetStringTypeW SetFilePointer PostQueuedCompletionStatus SetFileApisToANSI CancelWaitableTimer GetCurrentProcess SetNamedPipeHandleState GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA TerminateJobObject QueryDosDeviceW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW GetModuleFileNameA SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle CloseHandle CreateFileA DeleteFileA

user32

OemToCharA

msimg32

AlphaBlend

Sharing