da05437c8910c0f15bfe6484f7374a01[.]exe

General

Target
da05437c8910c0f15bfe6484f7374a01.exe
Size 388KB
Sample220623-gr3rgsega6
SHA256 cd8fdfee914d46d345bedd2868f2aec93c48fd00385492e377793f06cd42dc1f
MD5 da05437c8910c0f15bfe6484f7374a01
SHA1 4fb57f23b1e8524ae2ba4fe639845bb223af92bd
SHA512 df3128779b07869740d19ebd5a2b907578c4921cd593604d98260ec464b0f5746109f233411122af6be792e05646424337cc7ad23289464f516fc330ccc5970c
SSDEEP 6144:sbVZd5jQmg0ipwgSEam4ynPtbwYqLV4YlVg7umhm4r9L4:sb/omglygSEamztbhaWY3gdhmM8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

da05437c8910c0f15bfe6484f7374a01.exe

.exe 388KB

da05437c8910c0f15bfe6484f7374a01.exe

IMPHASH 927ae337b8ac2552bae9fd0b2ef78d45
SHA256 cd8fdfee914d46d345bedd2868f2aec93c48fd00385492e377793f06cd42dc1f
MD5 da05437c8910c0f15bfe6484f7374a01
SHA1 4fb57f23b1e8524ae2ba4fe639845bb223af92bd
SHA512 df3128779b07869740d19ebd5a2b907578c4921cd593604d98260ec464b0f5746109f233411122af6be792e05646424337cc7ad23289464f516fc330ccc5970c
SSDEEP 6144:sbVZd5jQmg0ipwgSEam4ynPtbwYqLV4YlVg7umhm4r9L4:sb/omglygSEamztbhaWY3gdhmM8
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

53104

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugBreakProcess FindFirstChangeNotificationA GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterW DisableThreadLibraryCalls TerminateProcess GetProcessId VerifyVersionInfoW EnumDateFormatsW FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsW VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost FindFirstChangeNotificationW GetFileType DeleteFileA FindNextVolumeMountPointA OutputDebugStringA ResetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleW SetComputerNameExW GetTimeZoneInformation LoadLibraryA GetSystemDirectoryA GetDriveTypeW BuildCommDCBAndTimeoutsA GetShortPathNameW ActivateActCtx GetProfileSectionA DeleteFileW GetCommandLineW InterlockedIncrement InterlockedExchangeAdd AddRefActCtx FindResourceA FormatMessageA GetModuleFileNameW CreateJobObjectW InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryA GetExitCodeThread WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA UpdateResourceW InterlockedDecrement GetVersionExA HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW SetLastError GetPrivateProfileIntA GetConsoleAliasExesW DebugBreak EndUpdateResourceW GetLastError GetStringTypeW DeleteVolumeMountPointA OpenFileMappingA SetDefaultCommConfigW VirtualAlloc lstrcpyA TerminateThread GetACP lstrcatA GetConsoleAliasA _lwrite GetQueuedCompletionStatus GetNamedPipeHandleStateA GetDiskFreeSpaceExW RemoveVectoredExceptionHandler WriteConsoleW VirtualProtect ReadConsoleOutputA SetThreadContext BuildCommDCBA ReleaseActCtx GetHandleInformation GetComputerNameW WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesA OpenWaitableTimerW CopyFileW GetVolumePathNameA SetConsoleMode HeapSetInformation SetComputerNameA FindNextFileA SetEvent UnlockFileEx GetProcAddress DeleteTimerQueueTimer MoveFileA GlobalAlloc SetCommMask SetFileShortNameA FreeEnvironmentStringsW FindActCtxSectionStringW GetSystemWindowsDirectoryA GetProfileStringA GetConsoleTitleA GlobalGetAtomNameA SetComputerNameW GetConsoleAliasesA CreateMailslotA GetConsoleOutputCP MoveFileWithProgressW GetFileInformationByHandle SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW GetCurrentActCtx OpenSemaphoreW GetModuleHandleExA LoadLibraryW GetFileAttributesA GetTickCount GetConsoleAliasesLengthA LocalUnlock GetFileTime EnumResourceNamesW OpenFileMappingW UnhandledExceptionFilter GetCompressedFileSizeW GetThreadPriority ReadConsoleA WriteConsoleOutputCharacterW AssignProcessToJobObject EnumDateFormatsA Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind WideCharToMultiByte HeapValidate IsBadReadPtr SetUnhandledExceptionFilter GetCurrentProcess IsDebuggerPresent GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetStdHandle WriteFile GetConsoleCP GetConsoleMode QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetStartupInfoA HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapReAlloc FlushFileBuffers OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetLocaleInfoA LCMapStringA LCMapStringW WriteConsoleA SetFilePointer CreateFileA CloseHandle

user32

CharUpperA

winhttp

WinHttpWriteData

Sharing