dd843167036a75a13ea23f8be8322f65[.]exe

General

Target
dd843167036a75a13ea23f8be8322f65.exe
Size 390KB
Sample220627-xprjfaeff3
SHA256 1fb2b93ef28594e6da5fdf8d7f782bf692675ceea83c5bbd1ce3548070e5fbc3
MD5 dd843167036a75a13ea23f8be8322f65
SHA1 86c8a9fae21fbd49fbeb7da467c1208eeafed944
SHA512 ea789b63672a62d810acd02c0b0dcea8ae38986bb50aa69787d6a1ccf756270929e5f60013323850c5b4f99a1b8e99c51c03c8e20c2ac800188f5015dd3302e4
SSDEEP 12288:bJK0xbxXg6MjMEEUpLWl4fbAM/fAvjOVFOWk:Y0rXgljq4APM/4bqOWk
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

dd843167036a75a13ea23f8be8322f65.exe

.exe 390KB

dd843167036a75a13ea23f8be8322f65.exe

IMPHASH ec3bfeb025110fb411f85a2a0456d05d
SHA256 1fb2b93ef28594e6da5fdf8d7f782bf692675ceea83c5bbd1ce3548070e5fbc3
MD5 dd843167036a75a13ea23f8be8322f65
SHA1 86c8a9fae21fbd49fbeb7da467c1208eeafed944
SHA512 ea789b63672a62d810acd02c0b0dcea8ae38986bb50aa69787d6a1ccf756270929e5f60013323850c5b4f99a1b8e99c51c03c8e20c2ac800188f5015dd3302e4
SSDEEP 12288:bJK0xbxXg6MjMEEUpLWl4fbAM/fAvjOVFOWk:Y0rXgljq4APM/4bqOWk
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

61184

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugSetProcessKillOnExit FindNextChangeNotification GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterA EnumSystemCodePagesW TerminateProcess GetProcessId VerifyVersionInfoA EnumDateFormatsA FindNextFileA CopyFileExA BuildCommDCBAndTimeoutsW VirtualUnlock WriteProfileStringW VerifyVersionInfoW GetDriveTypeA GetFileType DeleteFileW FindNextVolumeMountPointW OutputDebugStringA ResetWriteWatch WriteConsoleInputW GetConsoleTitleA GetComputerNameExW SetTimeZoneInformation CallNamedPipeA LoadLibraryA GetSystemDirectoryA GetDriveTypeW BuildCommDCBAndTimeoutsA ActivateActCtx GetProfileSectionW GetCommandLineW AddRefActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectA InitializeCriticalSection SetFirmwareEnvironmentVariableW GetDllDirectoryW TerminateThread CreateNamedPipeW WritePrivateProfileStringW GetConsoleAliasesLengthA WriteProfileSectionW AddAtomA InterlockedDecrement GetVersionExW HeapSize _hwrite GetStartupInfoA ConnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW GetPrivateProfileIntA GetConsoleAliasExesA DebugBreak EndUpdateResourceW InterlockedExchangeAdd SetLastError GetStringTypeExA DeleteVolumeMountPointW SetDefaultCommConfigW lstrcpyA GetOEMCP _lwrite GetNamedPipeHandleStateA GetDiskFreeSpaceExW CreateJobSet WriteConsoleA VirtualProtect ReadConsoleOutputA SetThreadContext BuildCommDCBW ReleaseActCtx FoldStringA GetHandleInformation WritePrivateProfileSectionA DeleteCriticalSection GetFileAttributesA OpenWaitableTimerW SetConsoleMode HeapSetInformation SetComputerNameA SetEvent UnlockFile GetProcAddress ChangeTimerQueueTimer CopyFileW MoveFileA GlobalAlloc GetCommMask SetFileShortNameW GetFileAttributesW FreeEnvironmentStringsW GetProfileStringA SetComputerNameW GetConsoleAliasesW ReadConsoleInputW CreateMailslotA EnumDateFormatsW GetTimeZoneInformation SetConsoleOutputCP GetFileInformationByHandle SetLocalTime FoldStringW CallNamedPipeW GetCurrentActCtx CopyFileExW OpenSemaphoreW GetModuleHandleExA LoadLibraryW GetConsoleAliasExesLengthW GetTickCount LocalFlags FindFirstVolumeW CancelDeviceWakeupRequest SetFileTime GetQueuedCompletionStatus lstrcatW OpenWaitableTimerA EnumResourceNamesW OpenFileMappingW UnregisterWait UnhandledExceptionFilter GetCompressedFileSizeW GetThreadPriority ReadConsoleW AssignProcessToJobObject InterlockedIncrement Sleep EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr GetModuleHandleA TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW OutputDebugStringW ExitProcess GetACP GetCPInfo IsValidCodePage QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW SetStdHandle GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA DeleteFileA

Sharing