ec6e2b5401377619ef66f11cb228706d[.]exe

General

Target
ec6e2b5401377619ef66f11cb228706d.exe
Size 636KB
Sample220216-xrhpbaddam
SHA256 63116a7686b86bf85bfc4e27fa6f465f8dea270f165c431cac19dd647579fbc5
MD5 ec6e2b5401377619ef66f11cb228706d
SHA1 8e21e1c81c8ea39a182b09da6750e5a8d8519b25
SHA512 c3694e77130c6522e5a112673bb7cc23bf218e6e904731c593085fc1aefe090c122a32e16ef8d626377e161730125aa3a17a154e1b6be44371231d9b80c77bc9
SSDEEP 12288:/CPaEFrys+1rJA/ekZ5QAkD1SovwRMARzguS+ZSTK8nP4KVC:/CPaEwDRITQ/YoRagNTXAKE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ec6e2b5401377619ef66f11cb228706d.exe

.exe 636KB

ec6e2b5401377619ef66f11cb228706d.exe

IMPHASH a8313245d507ee53d75f6adf6bc3944b
SHA256 63116a7686b86bf85bfc4e27fa6f465f8dea270f165c431cac19dd647579fbc5
MD5 ec6e2b5401377619ef66f11cb228706d
SHA1 8e21e1c81c8ea39a182b09da6750e5a8d8519b25
SHA512 c3694e77130c6522e5a112673bb7cc23bf218e6e904731c593085fc1aefe090c122a32e16ef8d626377e161730125aa3a17a154e1b6be44371231d9b80c77bc9
SSDEEP 12288:/CPaEFrys+1rJA/ekZ5QAkD1SovwRMARzguS+ZSTK8nP4KVC:/CPaEwDRITQ/YoRagNTXAKE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22194

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryExW InterlockedIncrement GetConsoleAliasesLengthA GetConsoleTitleA FindActCtxSectionStringA GlobalAlloc ReadConsoleInputA GetStringTypeExW LeaveCriticalSection WriteConsoleW GetMailslotInfo CreateMailslotW RaiseException EnumSystemLocalesA VerifyVersionInfoW GetStdHandle GetProcAddress VirtualAlloc SetStdHandle GetDefaultCommConfigW GetAtomNameA LoadLibraryA SetCalendarInfoW GetFileType ContinueDebugEvent UpdateResourceW GetStringTypeW GetConsoleTitleW GetFileTime GetVersionExA GetVolumeNameForVolumeMountPointW LocalFree SetFileAttributesW LCMapStringW CreateThread SetThreadContext GetLocaleInfoA EnterCriticalSection GetComputerNameA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetFilePointer CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID IsValidLocale GetStringTypeA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleA GetConsoleOutputCP CreateFileA

user32

ScreenToClient

gdi32

GetCharWidthFloatW

advapi32

ClearEventLogW

Sharing