d233399094597e32a797781d3bacf4fb[.]exe

General

Target
d233399094597e32a797781d3bacf4fb.exe
Size 708KB
Sample220203-ttpnvsbhar
SHA256 0ed974de469222788be4db09ddf1720ea96a39e959df8eda85e6dcccb73e4a59
MD5 d233399094597e32a797781d3bacf4fb
SHA1 87b1dbc01b5ae45dc4d18e4ffc432ce2911590fa
SHA512 1555a0a9340c74208d18bdc0f41d351abd619ca078696fade804f58425f0186c79e79a45742e92d47fa22c3dd54749b74a2cd6a8221e3c49ba7307a9aa76954d
SSDEEP 12288:d951lETQ+kdW1tvvmk8weH+e2kQhcuvgwDsJWCQJ12453Rum1JUbAOMXpo8u:cuWj2QaUkQuAhDSQbxqXB4+8u
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d233399094597e32a797781d3bacf4fb.exe

.exe 708KB

d233399094597e32a797781d3bacf4fb.exe

IMPHASH 6f6aeb6fc382a28ed1adc7823a20786d
SHA256 0ed974de469222788be4db09ddf1720ea96a39e959df8eda85e6dcccb73e4a59
MD5 d233399094597e32a797781d3bacf4fb
SHA1 87b1dbc01b5ae45dc4d18e4ffc432ce2911590fa
SHA512 1555a0a9340c74208d18bdc0f41d351abd619ca078696fade804f58425f0186c79e79a45742e92d47fa22c3dd54749b74a2cd6a8221e3c49ba7307a9aa76954d
SSDEEP 12288:d951lETQ+kdW1tvvmk8weH+e2kQhcuvgwDsJWCQJ12453Rum1JUbAOMXpo8u:cuWj2QaUkQuAhDSQbxqXB4+8u
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

55312

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigA SetCommConfig GetDriveTypeW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeA InitializeCriticalSectionAndSpinCount ReadConsoleInputW TlsSetValue SetComputerNameExW FindAtomW BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryA LocalAlloc InitializeCriticalSection TlsGetValue GetCommandLineA InterlockedIncrement GetCalendarInfoA CopyFileA OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW ExitThread GlobalWire HeapCompact GetStartupInfoA CreatePipe GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryA WriteProfileSectionW GetCalendarInfoW IsDebuggerPresent SetConsoleCursorPosition GetLastError DebugActiveProcess WriteFile GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW CopyFileW FindNextChangeNotification CreateActCtxA GetPrivateProfileIntA _lread OutputDebugStringW InterlockedDecrement DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceW WriteConsoleA InterlockedPushEntrySList WritePrivateProfileSectionW DeleteCriticalSection GetPrivateProfileSectionNamesA GetFileAttributesExW FileTimeToSystemTime MoveFileW TerminateProcess HeapSetInformation lstrcmpW GetComputerNameA FindActCtxSectionStringA WriteProcessMemory MoveFileExA GetProcAddress GlobalCompact UnregisterWait WriteConsoleInputA FormatMessageA FatalExit TransmitCommChar WaitNamedPipeW CreateIoCompletionPort FindResourceExA GetSystemInfo EnumCalendarInfoExW OpenSemaphoreA GetPrivateProfileStructA GetMailslotInfo lstrcpyW VerLanguageNameW SetThreadExecutionState GetSystemTime GetFileInformationByHandle GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameW WriteConsoleInputW CreateMailslotA GetCommState GetLogicalDrives _lopen GetConsoleAliasExesLengthW GetWriteWatch ClearCommBreak ChangeTimerQueueTimer GetOverlappedResult EnumDateFormatsA GlobalDeleteAtom HeapSize GetConsoleWindow GetStringTypeA SetFilePointer PostQueuedCompletionStatus SetFileApisToANSI OpenWaitableTimerW GetProcessId PeekNamedPipe FillConsoleOutputCharacterW FindNextVolumeMountPointA WriteProfileStringW InitAtomTable GlobalAddAtomA WriteConsoleOutputCharacterA TerminateJobObject VirtualAlloc GetBinaryTypeW QueryDosDeviceW LeaveCriticalSection GetVolumePathNameA FileTimeToDosDateTime Sleep EnterCriticalSection RaiseException RtlUnwind MoveFileA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess SetHandleCount GetStdHandle GetFileType GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapReAlloc FlushFileBuffers GetConsoleMode DebugBreak WriteConsoleW LoadLibraryW SetStdHandle MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA CreateFileA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing