3dde884fe32b5baf4efa8c0d01f224f4[.]exe

General

Target
3dde884fe32b5baf4efa8c0d01f224f4.exe
Size 367KB
Sample220411-kr5smacfer
SHA256 82c19e6c5ec49ed546881a71c049d2091a8786f4cca9a312efa796c3fb80901d
MD5 3dde884fe32b5baf4efa8c0d01f224f4
SHA1 4669b41b2a447b461e498d5156257c25bc026973
SHA512 e3bdc5e04a822803a4bdee2f60a8f59cc1b1cd2b72c5772f6aa478786fb359866647f8f62837863fff9d69eb38ebdc771fef4eef1ce88c4bd5ee1a9f0fa8b0e5
SSDEEP 6144:8YgYMqZF607Dzz59zdmXrUvKpwPCpDhxx9ivQVo3L/Io65+6TV+:XgYrv7D359zdoqKpbNKn/nL/
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3dde884fe32b5baf4efa8c0d01f224f4.exe

.exe 367KB

3dde884fe32b5baf4efa8c0d01f224f4.exe

IMPHASH 66f10e12500a3832662f8d0b347897ad
SHA256 82c19e6c5ec49ed546881a71c049d2091a8786f4cca9a312efa796c3fb80901d
MD5 3dde884fe32b5baf4efa8c0d01f224f4
SHA1 4669b41b2a447b461e498d5156257c25bc026973
SHA512 e3bdc5e04a822803a4bdee2f60a8f59cc1b1cd2b72c5772f6aa478786fb359866647f8f62837863fff9d69eb38ebdc771fef4eef1ce88c4bd5ee1a9f0fa8b0e5
SSDEEP 6144:8YgYMqZF607Dzz59zdmXrUvKpwPCpDhxx9ivQVo3L/Io65+6TV+:XgYrv7D359zdoqKpbNKn/nL/
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42992

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask SetLocaleInfoW FindNextVolumeA HeapWalk GetNamedPipeHandleStateW SystemTimeToFileTime FillConsoleOutputCharacterW VirtualFree TerminateProcess GetLastError GetVersionExA FreeResource EnumResourceNamesW FindNextFileA CopyFileExW BuildCommDCBW SetDefaultCommConfigA WritePrivateProfileStructA LocalCompact ChangeTimerQueueTimer ReadConsoleInputA WriteConsoleInputA LoadResource AddAtomA SearchPathA GetThreadTimes CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryA GlobalAlloc SetProcessPriorityBoost GetProfileSectionW DeleteFileW FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageW SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLCID SetWaitableTimer SetConsoleTextAttribute InterlockedDecrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileW SetCalendarInfoA DebugBreak EndUpdateResourceW SetLastError FatalAppExitW SetSystemTime OpenFileMappingA GetConsoleAliasExesLengthA lstrcmpA WriteFileGather FlushConsoleInputBuffer SetDefaultCommConfigW VirtualAllocEx InterlockedExchangeAdd GetSystemTimeAdjustment GetSystemWindowsDirectoryW CopyFileA GetACP GlobalFindAtomW lstrcatA SetMailslotInfo CreateActCtxW _lwrite OutputDebugStringA CreateNamedPipeA GetAtomNameW SetConsoleActiveScreenBuffer EnumResourceTypesW lstrlenA DebugActiveProcessStop WriteConsoleW lstrcpyA ReadConsoleOutputW GetThreadContext ReleaseActCtx GetStringTypeA GetPrivateProfileStringA GetFileAttributesExA LocalFileTimeToFileTime MoveFileA GetVolumePathNameA GetCommMask SetFileShortNameW VerLanguageNameW LockFile ProcessIdToSessionId GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW SystemTimeToTzSpecificLocalTime MoveFileWithProgressA ContinueDebugEvent GetStringTypeExA EnumSystemLocalesA GetPrivateProfileIntA GetModuleHandleW OpenMutexW GetModuleFileNameW OpenWaitableTimerA GetConsoleAliasesLengthW GlobalUnWire FillConsoleOutputCharacterA GetCompressedFileSizeA FindNextVolumeMountPointA SetThreadPriority ReadConsoleW MapUserPhysicalPagesScatter WriteConsoleOutputCharacterW QueryInformationJobObject GetDateFormatW GetConsoleAliasExesW EnumDateFormatsA GlobalUnfix OpenMutexA RaiseException GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringW LoadLibraryW MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA

Sharing