3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a3[.]exe

General

Target
3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a3.exe
Size 344KB
Sample220216-v1eb5scac7
SHA256 3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a370689dc516c2418a58e
MD5 0c8e60e686bed8b0debc760b085f89a7
SHA1 60eae9962d92223a448f978004972f4be2f10588
SHA512 e0be1a48c2715c820306ca43443f010ab65589525e35755e42df8291dfad083cb2f6f8204f44c4248269221212eaf8f73fdf1c44f24be217d40e42a0b62648f3
SSDEEP 6144:O+WBPfOV5NM505R5uVJMvCgH5BYi+96HVVEw2Z2nloe:OFa565GDuVSvCgAiy0IW
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a3.exe

.exe 344KB

3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a3.exe

IMPHASH 39faf729f370bc5b0eaea34fff27cff9
SHA256 3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a370689dc516c2418a58e
MD5 0c8e60e686bed8b0debc760b085f89a7
SHA1 60eae9962d92223a448f978004972f4be2f10588
SHA512 e0be1a48c2715c820306ca43443f010ab65589525e35755e42df8291dfad083cb2f6f8204f44c4248269221212eaf8f73fdf1c44f24be217d40e42a0b62648f3
SSDEEP 6144:O+WBPfOV5NM505R5uVJMvCgH5BYi+96HVVEw2Z2nloe:OFa565GDuVSvCgAiy0IW
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45072

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteProfileSectionW GetNumaProcessorNode FindFirstVolumeW SetConsoleCursorInfo HeapLock FindFirstChangeNotificationA WaitForSingleObject GetNamedPipeHandleStateA FileTimeToDosDateTime CallNamedPipeW EnumResourceTypesW EnumResourceNamesW ExitProcess GetExitCodeProcess ActivateActCtx GetVersionExA VerifyVersionInfoW GetConsoleOutputCP ResetEvent FindNextFileA GetCompressedFileSizeW CopyFileExW ReadConsoleOutputCharacterA GetDefaultCommConfigW VerLanguageNameW _hread SetCommConfig WritePrivateProfileStructA FreeEnvironmentStringsW CreateTimerQueueTimer FindVolumeClose LeaveCriticalSection WriteConsoleInputA TlsSetValue SetComputerNameExW FindAtomA BuildCommDCBAndTimeoutsA LocalAlloc VerifyVersionInfoA TlsGetValue GetCommandLineW InterlockedExchange CopyFileW AddRefActCtx OutputDebugStringW FormatMessageW GetPriorityClass WritePrivateProfileStringW GetUserDefaultLangID TerminateThread GlobalUnfix HeapValidate GetStartupInfoA CreatePipe GetCPInfoExA GetSystemWindowsDirectoryA WriteProfileSectionA GetCalendarInfoA DebugBreak GetConsoleCursorInfo SetLastError DeleteVolumeMountPointA DebugActiveProcessStop lstrcmpA GetPrivateProfileSectionNamesA GetSystemWindowsDirectoryW CreateActCtxW SetMailslotInfo GetPrivateProfileIntW _lread OutputDebugStringA InterlockedDecrement DefineDosDeviceW SetVolumeMountPointW SetThreadIdealProcessor SetConsoleActiveScreenBuffer GetProcessAffinityMask GlobalAddAtomW SetConsoleWindowInfo EndUpdateResourceA ContinueDebugEvent MoveFileW ReadConsoleA WriteConsoleA VirtualProtect BuildCommDCBA InterlockedFlushSList WritePrivateProfileSectionW DeleteCriticalSection GetFileAttributesExW FileTimeToLocalFileTime GetVolumePathNameW GetConsoleMode HeapWalk GetComputerNameW FindActCtxSectionStringA ReadProcessMemory MoveFileExA GetProcAddress GlobalFix GlobalDeleteAtom FatalExit InterlockedExchangeAdd WaitNamedPipeA SetSystemTime GetLocalTime FreeEnvironmentStringsA OpenSemaphoreA GetPrivateProfileStructA EnumCalendarInfoExA GetMailslotInfo lstrcpyA LockFile EndUpdateResourceW GetConsoleCP GetConsoleAliasW GetLargestConsoleWindowSize FindAtomW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW EnumDateFormatsW SetCommState _lopen GetConsoleAliasExesLengthW ResetWriteWatch GetPrivateProfileStringW ClearCommError CreateIoCompletionPort LoadLibraryW ChangeTimerQueueTimer GetFileInformationByHandle GetLastError SetFirmwareEnvironmentVariableW MoveFileA GetConsoleDisplayMode GetSystemDefaultLangID LocalLock GetCommMask SetMessageWaitingIndicator AreFileApisANSI OpenWaitableTimerA GetProcessShutdownParameters PeekNamedPipe FillConsoleOutputCharacterW FindNextVolumeMountPointW WriteProfileStringW DeleteAtom AddAtomW WriteConsoleOutputCharacterA AssignProcessToJobObject QueryDosDeviceW EnterCriticalSection GetConsoleAliasExesW GetBinaryTypeA DeleteFileA RaiseException GetCommandLineA IsBadReadPtr GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent CloseHandle GetModuleHandleW Sleep InterlockedIncrement TlsAlloc GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleW SetStdHandle FlushFileBuffers MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CreateFileA

user32

OemToCharW

Sharing