63b509f4565ff9a05402b2b18083b53a[.]exe

General

Target
63b509f4565ff9a05402b2b18083b53a.exe
Size 266KB
Sample220617-llhatabdel
SHA256 8ff416db5447cbcb7da7a2c10b20e3ec47f315fa15184979ea86c4e7e039a4c2
MD5 63b509f4565ff9a05402b2b18083b53a
SHA1 a0c3ba7679a36976bbbbad6c08758054ba49af8b
SHA512 49463bd0b39e16855562aa7230a6868493bac6028e33809c109421def6a152bb6d803855521da106e40527f4a0fcf6995c7533e193e337e09aea6e7f9e363d10
SSDEEP 6144:yH8IVk4Zehh58aShksd29V0mN1s0fVyQaUvPQP/s:yHhBSh59uksd2ku1sqQQ+8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

63b509f4565ff9a05402b2b18083b53a.exe

.exe 266KB

63b509f4565ff9a05402b2b18083b53a.exe

IMPHASH 3215fae786e72310b15953e12ddd6b57
SHA256 8ff416db5447cbcb7da7a2c10b20e3ec47f315fa15184979ea86c4e7e039a4c2
MD5 63b509f4565ff9a05402b2b18083b53a
SHA1 a0c3ba7679a36976bbbbad6c08758054ba49af8b
SHA512 49463bd0b39e16855562aa7230a6868493bac6028e33809c109421def6a152bb6d803855521da106e40527f4a0fcf6995c7533e193e337e09aea6e7f9e363d10
SSDEEP 6144:yH8IVk4Zehh58aShksd29V0mN1s0fVyQaUvPQP/s:yHhBSh59uksd2ku1sqQQ+8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

59136

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationW GetNamedPipeHandleStateW GetOverlappedResult FillConsoleOutputCharacterW DisableThreadLibraryCalls TerminateProcess GetCurrentProcessId GetVersionExA EnumDateFormatsA FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsA VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost GetPriorityClass GetCompressedFileSizeA FindNextVolumeMountPointW OutputDebugStringW GetWriteWatch WriteConsoleInputA GetConsoleTitleA SetComputerNameExA GetTimeZoneInformation LoadLibraryW GetSystemDirectoryA GetDriveTypeA LoadLibraryA LocalAlloc GetShortPathNameA ActivateActCtx GetProfileSectionA DeleteFileW GetCommandLineA ReleaseActCtx FindResourceA FormatMessageA GetModuleFileNameA CreateJobObjectW InitializeCriticalSection SetFirmwareEnvironmentVariableA GetDllDirectoryW GetExitCodeThread GetNamedPipeHandleStateA WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionA AddAtomA UpdateResourceW InterlockedDecrement HeapValidate _hwrite GetStartupInfoW DisconnectNamedPipe GetCPInfoExA GetSystemWow64DirectoryW GetConsoleAliasExesA DebugBreak EndUpdateResourceA InterlockedExchangeAdd GetLastError FreeLibraryAndExitThread GetStringTypeExW GetConsoleAliasesLengthA DeleteVolumeMountPointA FatalAppExitA SetSystemTime OpenFileMappingW lstrcmpA SetConsoleCursorPosition SetDefaultCommConfigA GetSystemWindowsDirectoryA GetACP CreateActCtxW GetMailslotInfo GetConsoleAliasW _lwrite GetDiskFreeSpaceExA DefineDosDeviceW FlushConsoleInputBuffer EnumResourceTypesA lstrlenA GetLongPathNameW CreateJobSet WriteConsoleA VirtualProtect ReadConsoleOutputW SuspendThread BuildCommDCBW WritePrivateProfileStringA GetHandleInformation GetComputerNameW WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA CopyFileW GetVolumePathNameA GetConsoleMode HeapWalk FindNextFileA ResetEvent ReadProcessMemory GetProcAddress ChangeTimerQueueTimer InterlockedCompareExchange MoveFileA SetCommMask SetFileShortNameA FreeEnvironmentStringsA EnumDateFormatsExW GetSystemWindowsDirectoryW GetProfileStringW GlobalGetAtomNameW SetComputerNameW GetConsoleAliasesA CreateMailslotW EnumDateFormatsW GetConsoleOutputCP MoveFileWithProgressA GetFileInformationByHandle GetLocalTime FoldStringA CallNamedPipeW GetConsoleAliasExesLengthW CopyFileExW OpenSemaphoreA GetModuleHandleExW WriteConsoleOutputCharacterA FindActCtxSectionStringW GetTickCount GetUserDefaultLangID LocalLock FindFirstVolumeW GetFileTime lstrcatW OpenWaitableTimerA EnumResourceNamesA OpenFileMappingA GetFileType UnregisterWait RaiseException lstrcpynW GetFullPathNameA GetThreadPriority ReadConsoleA CreateFileW GetDateFormatA DeactivateActCtx GetConsoleAliasExesW SetCurrentDirectoryW GetBinaryTypeW GetFileAttributesA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetModuleHandleW ExitProcess DeleteFileA IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetStdHandle WriteFile OutputDebugStringA WriteConsoleW GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount SetHandleCount GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers WideCharToMultiByte GetConsoleCP HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer SetStdHandle ReadFile CloseHandle CreateFileA

Sharing