6a3737493b3835b7d650b1cbc09d8e5b[.]exe

General

Target
6a3737493b3835b7d650b1cbc09d8e5b.exe
Size 324KB
Sample220311-xnn2xsdhal
SHA256 c73fbcd3422e85b23bfa0e2d65ee0b35ecb344c7f1fe4d2827e45339137b356c
MD5 6a3737493b3835b7d650b1cbc09d8e5b
SHA1 f56bdf2b93e48c87a758090be3809207c3661283
SHA512 4ca78cedbb3426a312831c8d3acfe5aefcc9df1b782f3bcf0ba2a3de346491842a3e81d43f3ee46f66397ebb33827512f2c519128fc0140f6000123055ac3b92
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

6a3737493b3835b7d650b1cbc09d8e5b.exe

.exe 324KB

6a3737493b3835b7d650b1cbc09d8e5b.exe

IMPHASH 5dabb44f23597143e9b874503cbd5a26
SHA256 c73fbcd3422e85b23bfa0e2d65ee0b35ecb344c7f1fe4d2827e45339137b356c
MD5 6a3737493b3835b7d650b1cbc09d8e5b
SHA1 f56bdf2b93e48c87a758090be3809207c3661283
SHA512 4ca78cedbb3426a312831c8d3acfe5aefcc9df1b782f3bcf0ba2a3de346491842a3e81d43f3ee46f66397ebb33827512f2c519128fc0140f6000123055ac3b92
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

51392

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteProfileSectionA SetLocaleInfoA FindFirstVolumeA GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterW GetTimeZoneInformation TerminateThread SignalObjectAndWait GetVersionExW VerifyVersionInfoA QueryDepthSList SetEvent FindNextFileA BuildCommDCBAndTimeoutsA GetCompressedFileSizeA CopyFileExW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructA FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomA LoadResource GetThreadPriority CallNamedPipeW BuildCommDCBAndTimeoutsW VirtualProtect LocalAlloc GetProfileSectionA GetCommandLineA InterlockedExchange FindFirstChangeNotificationW GetCalendarInfoA ReleaseActCtx OutputDebugStringW FormatMessageA SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLangID TerminateProcess GlobalFix HeapValidate InterlockedCompareExchange GetStartupInfoW SetCalendarInfoW DebugBreak SetConsoleTextAttribute GetLastError CopyFileA DisconnectNamedPipe GetCPInfoExW GetComputerNameExW ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW GetACP GetPrivateProfileStringA CreateActCtxA GetConsoleAliasW lstrlenA WriteConsoleA GlobalWire FormatMessageW GetPrivateProfileSectionNamesA GetSystemTimeAsFileTime EnumCalendarInfoA SetThreadAffinityMask VerSetConditionMask CreateConsoleScreenBuffer GetSystemWindowsDirectoryA GetProfileStringW CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW GetCommState SetThreadContext GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthW MoveFileA GetWriteWatch GetPrivateProfileStringW GetModuleHandleA EnumDateFormatsA DeleteAtom LoadLibraryW TlsFree SetFirmwareEnvironmentVariableW CommConfigDialogW GetConsoleAliasesLengthA CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerW OpenFileMappingW SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FindNextVolumeMountPointW SetThreadPriority ReadConsoleW AddAtomA WriteConsoleOutputCharacterW GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA EnterCriticalSection InitializeCriticalSection GetSystemWow64DirectoryW LoadLibraryA DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep InterlockedIncrement InterlockedDecrement ExitProcess TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId SetLastError SetHandleCount GetStdHandle GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

gdi32

GetBoundsRect

winhttp

WinHttpConnect

msimg32

AlphaBlend

Sharing