b0bbaf3e1970109f616a5681c4db46a5[.]exe

General

Target
b0bbaf3e1970109f616a5681c4db46a5.exe
Size 312KB
Sample220201-ve5bfaaaf3
SHA256 e069ce2651bc7095e62c6a919fee34c696eb76995b5ef58d5311d89218847fd0
MD5 b0bbaf3e1970109f616a5681c4db46a5
SHA1 4409a2fd3c5009f48d109f33e9a9d55e8b7ac991
SHA512 85bea639e018813494d9d9cddc6ee4aa22019266563efaea707f4d86abf5557abc3f63a1c6480884d705e0cc4958ee568207d7e1623d6b94048eaaecd52cbd71
SSDEEP 6144:dqkIqmN71pEvj9bzFstzH6JwRo9KckNfsbMy3Gh2AHRjy+UJLWeeL0:dtI9RpKxXiFH6Jwo9ofsbHGhtemw
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b0bbaf3e1970109f616a5681c4db46a5.exe

.exe 312KB

b0bbaf3e1970109f616a5681c4db46a5.exe

IMPHASH 2dce05c2af9200495a262edc4b988bb5
SHA256 e069ce2651bc7095e62c6a919fee34c696eb76995b5ef58d5311d89218847fd0
MD5 b0bbaf3e1970109f616a5681c4db46a5
SHA1 4409a2fd3c5009f48d109f33e9a9d55e8b7ac991
SHA512 85bea639e018813494d9d9cddc6ee4aa22019266563efaea707f4d86abf5557abc3f63a1c6480884d705e0cc4958ee568207d7e1623d6b94048eaaecd52cbd71
SSDEEP 6144:dqkIqmN71pEvj9bzFstzH6JwRo9KckNfsbMy3Gh2AHRjy+UJLWeeL0:dtI9RpKxXiFH6Jwo9ofsbHGhtemw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56096

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigW FindFirstFileExA GetDriveTypeA FreeEnvironmentStringsW SetProcessPriorityBoost FindNextVolumeW SetCurrentDirectoryA GetLongPathNameA TlsGetValue SetComputerNameExA FindAtomW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection GetCommandLineW InterlockedDecrement GetCalendarInfoA CopyFileA ZombifyActCtx OutputDebugStringW SetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringA GetProcessHeap GlobalWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExA GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError WriteProfileSectionW GetCalendarInfoW GetProfileStringA SetConsoleCursorPosition GetLastError DeleteVolumeMountPointW ContinueDebugEvent WriteFile GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryA GlobalFindAtomA FindNextChangeNotification CreateActCtxA GetMailslotInfo GetPrivateProfileIntA _lread DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA TryEnterCriticalSection GetPrivateProfileSectionNamesW GetFileAttributesExW LocalFileTimeToFileTime MoveFileW GetVolumePathNameA TerminateProcess lstrcmpW GetComputerNameA FindActCtxSectionStringA GetThreadContext MoveFileExA GetProcAddress GlobalCompact UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameA OpenEventA SetCommTimeouts WaitNamedPipeW CreateIoCompletionPort GetPrivateProfileSectionNamesA FindResourceExW GetSystemTimeAsFileTime GetSystemInfo FreeEnvironmentStringsA GetLocalTime OpenSemaphoreA WriteProfileStringA SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry GetSystemTime UnlockFile GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameA WriteConsoleInputW CreateMailslotA SetCommState SetHandleCount _lopen ResetWriteWatch ClearCommBreak GetModuleHandleW GetOverlappedResult EnumDateFormatsA GetConsoleAliasExesLengthW WriteConsoleOutputCharacterA HeapFree OpenMutexW GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI OpenWaitableTimerW GetCurrentProcess PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameA WriteProfileStringW InitAtomTable GlobalAddAtomW TerminateJobObject SetFirmwareEnvironmentVariableA GetBinaryTypeW LeaveCriticalSection QueryDosDeviceA HeapSetInformation CreateNamedPipeA CreateFileA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind MoveFileA GetCommandLineA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW IsDebuggerPresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc FlushFileBuffers GetConsoleMode DebugBreak OutputDebugStringA LoadLibraryW InitializeCriticalSectionAndSpinCount SetStdHandle MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA WriteConsoleA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing