d8345debb4a650f89075ea71681620cc[.]exe

General

Target
d8345debb4a650f89075ea71681620cc.exe
Size 334KB
Sample220126-wccdbagec6
SHA256 f89c3828131de9a67cd510e9da867e2ba7de41193773deb7f7e5a14ed86e967f
MD5 d8345debb4a650f89075ea71681620cc
SHA1 92c40f639e9a9aaf7296e0c7342586366e58e318
SHA512 7d2e1b50e47df5dbc49cd7796fb5619314f5f6d212d0528b70e6f5760cd1ccaadd299ccecb7b29c99486e74b3195b4d84bab9b47b9335d8a987a48c5bc2ad276
SSDEEP 6144:HVtGvrPX5T+J+YAo0BYs8NWnfZPj4x38/JwtSZCv9vxxNCMX3D7T5njI3:Hn+S+k0ShUfZPj4x38CtSEJQMvO
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d8345debb4a650f89075ea71681620cc.exe

.exe 334KB

d8345debb4a650f89075ea71681620cc.exe

IMPHASH aa2b22e8e3b96fd546a63d71626f45a6
SHA256 f89c3828131de9a67cd510e9da867e2ba7de41193773deb7f7e5a14ed86e967f
MD5 d8345debb4a650f89075ea71681620cc
SHA1 92c40f639e9a9aaf7296e0c7342586366e58e318
SHA512 7d2e1b50e47df5dbc49cd7796fb5619314f5f6d212d0528b70e6f5760cd1ccaadd299ccecb7b29c99486e74b3195b4d84bab9b47b9335d8a987a48c5bc2ad276
SSDEEP 6144:HVtGvrPX5T+J+YAo0BYs8NWnfZPj4x38/JwtSZCv9vxxNCMX3D7T5njI3:Hn+S+k0ShUfZPj4x38CtSEJQMvO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

78720

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateNamedPipeW TerminateThread DeactivateActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW FindFirstFileExW GetDriveTypeW FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointW SetCurrentDirectoryW GetLongPathNameA TlsGetValue SetComputerNameExW FindAtomA BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection TlsSetValue GetCommandLineA InterlockedDecrement GetCalendarInfoA CopyFileW ZombifyActCtx OutputDebugStringW GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeap GetProcessHeaps GlobalUnWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetLastError GetProfileStringW WriteProfileSectionW GetProfileStringA GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugBreak GetPrivateProfileSectionW ReadFileScatter GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW TerminateProcess GlobalFindAtomA FindCloseChangeNotification CreateActCtxA SetMailslotInfo InterlockedExchange DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionW GetPrivateProfileStructA TryEnterCriticalSection GetFileAttributesExW FileTimeToLocalFileTime MoveFileA GetVolumePathNameW HeapUnlock GetComputerNameA FindActCtxSectionStringA SetThreadContext MoveFileExA GetOverlappedResult GlobalUnlock UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameA OpenEventW SetCommTimeouts WaitNamedPipeA CreateIoCompletionPort FindResourceExW GetSystemTimeAsFileTime GetSystemInfo SetLocalTime OpenSemaphoreA FreeEnvironmentStringsA lstrcmpW GetProcAddress GetPrivateProfileSectionNamesA SetFileShortNameW lstrcpyW VerLanguageNameA GetThreadSelectorEntry SetSystemTime UnlockFile GetConsoleCP GetConsoleAliasW SetConsoleScreenBufferSize AllocConsole GetAtomNameA WriteConsoleInputW TransactNamedPipe SetCommState SetHandleCount _lopen ResetWriteWatch EnumDateFormatsW GetConsoleAliasExesLengthA WriteConsoleOutputCharacterW HeapReAlloc OpenMutexA GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI CancelWaitableTimer GetCurrentProcess GetNamedPipeHandleStateA GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameW WriteProfileStringW DeleteAtom GlobalAddAtomA TerminateJobObject QueryDosDeviceW LeaveCriticalSection SetFirmwareEnvironmentVariableW GetBinaryTypeW InterlockedIncrement WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW LCMapStringA LCMapStringW GetCPInfo HeapValidate IsBadReadPtr GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree GetStdHandle WriteFile OutputDebugStringA GetFileType ExitProcess LoadLibraryW GetModuleFileNameA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapAlloc HeapSize VirtualAlloc IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode InitializeCriticalSectionAndSpinCount LoadLibraryA GetLocaleInfoW SetStdHandle WriteConsoleA CloseHandle CreateFileA DeleteFileA

user32

OemToCharA

msimg32

AlphaBlend

Sharing