6e16281cbdd76989cd383fe4fd945023[.]exe

General

Target
6e16281cbdd76989cd383fe4fd945023.exe
Size 351KB
Sample220415-bdr5yafddn
SHA256 fa2c27df76832b0f2df4613db54f00966faa279bc8c968b5b597f0e09f8f3fa8
MD5 6e16281cbdd76989cd383fe4fd945023
SHA1 195d847307011bf23e9e2f1a2a74b6f6bfe25803
SHA512 c2c0767140770af40044ce7db303203a79d2bda092e2ba612b49f3063509e5d0f5534ca0ebe9e6441c412f114eeed98d3b49777bef80f1f0876b99401611aaf5
SSDEEP 6144:Rz4hNvUSETJVDkGPO0xb++d8HUQMD9dPkaoCvOILA4VVha3t6zYaKHZ:uDULjYGPrxb++OdMD7PWaA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6e16281cbdd76989cd383fe4fd945023.exe

.exe 351KB

6e16281cbdd76989cd383fe4fd945023.exe

IMPHASH ce92d88910dad9eeb68593f866ac6902
SHA256 fa2c27df76832b0f2df4613db54f00966faa279bc8c968b5b597f0e09f8f3fa8
MD5 6e16281cbdd76989cd383fe4fd945023
SHA1 195d847307011bf23e9e2f1a2a74b6f6bfe25803
SHA512 c2c0767140770af40044ce7db303203a79d2bda092e2ba612b49f3063509e5d0f5534ca0ebe9e6441c412f114eeed98d3b49777bef80f1f0876b99401611aaf5
SSDEEP 6144:Rz4hNvUSETJVDkGPO0xb++d8HUQMD9dPkaoCvOILA4VVha3t6zYaKHZ:uDULjYGPrxb++OdMD7PWaA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

43088

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerSetConditionMask SetLocaleInfoW FindNextVolumeA HeapWalk GetNamedPipeHandleStateW FileTimeToLocalFileTime FillConsoleOutputCharacterW VirtualFree TerminateProcess GetLastError GetVersionExA FreeResource EnumResourceNamesW FindNextFileA CopyFileExW BuildCommDCBW SetDefaultCommConfigA WritePrivateProfileStructA LocalCompact ChangeTimerQueueTimer ReadConsoleInputA WriteConsoleInputA LoadResource AddAtomA SearchPathA GetThreadTimes CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryA GlobalAlloc SetProcessPriorityBoost GetProfileSectionW DeleteFileW FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageW SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLCID SetWaitableTimer SetConsoleTextAttribute InterlockedDecrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileA SetCalendarInfoA DebugBreak EndUpdateResourceW SetLastError FatalAppExitW SetSystemTime OpenFileMappingA GetConsoleAliasExesLengthA lstrcmpA WriteFileGather FlushConsoleInputBuffer SetDefaultCommConfigW VirtualAllocEx InterlockedExchangeAdd GetSystemTimeAdjustment GetSystemWindowsDirectoryW GetACP GlobalFindAtomW lstrcatA SetMailslotInfo CreateActCtxW _lwrite OutputDebugStringA CreateNamedPipeA GetAtomNameW SetConsoleActiveScreenBuffer EnumResourceTypesW lstrlenA DebugActiveProcessStop WriteConsoleW lstrcpyA GetModuleHandleA ReadConsoleOutputW GetThreadContext ReleaseActCtx GetStringTypeA GetPrivateProfileStringA GetDriveTypeW GetFileAttributesExA LocalFileTimeToFileTime MoveFileA GetVolumePathNameA GetCommMask SetFileShortNameW VerLanguageNameW LockFile ProcessIdToSessionId GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameA SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW SystemTimeToTzSpecificLocalTime MoveFileWithProgressA ContinueDebugEvent GetStringTypeExA EnumSystemLocalesA GetPrivateProfileIntA OpenMutexW GetModuleFileNameW OpenWaitableTimerA GetConsoleAliasesLengthW GlobalUnWire FillConsoleOutputCharacterA GetCompressedFileSizeA FindNextVolumeMountPointA SetThreadPriority ReadConsoleW MapUserPhysicalPagesScatter WriteConsoleOutputCharacterW QueryInformationJobObject GetDateFormatW GetConsoleAliasExesW EnumDateFormatsA GlobalUnfix OpenMutexA RaiseException GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringW LoadLibraryW MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA

Sharing