3b686cc1989c845c66c604f9dc9731d7[.]exe

General

Target
3b686cc1989c845c66c604f9dc9731d7.exe
Size 334KB
Sample220628-mky3lsafa8
SHA256 2df8d91f6242c44a553038fd580bf50a0c39588ece4ae7a7e0b5d2001e7808ca
MD5 3b686cc1989c845c66c604f9dc9731d7
SHA1 0e7b0829c78d964ba214e4f7c0e9ae083f74e4d2
SHA512 5ed493d960f303717bd92bbc7191e37641fa4d92ce88e50cfa0f58b65af68fff9020de230d6066223864eb771dd5e02684a0196699ccbfe0a12bb9b7a20dcc01
SSDEEP 6144:ZIFNskmhuYVxJefd00QQlKEjXpmZLtcdO5hT/yGHk3zEmmd4igafwVf:ZIFa/Vbv0lXQZkQB/7k31qF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3b686cc1989c845c66c604f9dc9731d7.exe

.exe 334KB

3b686cc1989c845c66c604f9dc9731d7.exe

IMPHASH 1f39d87084380c87bb0680c9bdba7a21
SHA256 2df8d91f6242c44a553038fd580bf50a0c39588ece4ae7a7e0b5d2001e7808ca
MD5 3b686cc1989c845c66c604f9dc9731d7
SHA1 0e7b0829c78d964ba214e4f7c0e9ae083f74e4d2
SHA512 5ed493d960f303717bd92bbc7191e37641fa4d92ce88e50cfa0f58b65af68fff9020de230d6066223864eb771dd5e02684a0196699ccbfe0a12bb9b7a20dcc01
SSDEEP 6144:ZIFNskmhuYVxJefd00QQlKEjXpmZLtcdO5hT/yGHk3zEmmd4igafwVf:ZIFa/Vbv0lXQZkQB/7k31qF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

197944

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetLocaleInfoA InterlockedIncrement _lwrite SetCommTimeouts GetSystemDirectoryA CreateEventW WriteConsoleW VerifyVersionInfoW WaitNamedPipeW BuildCommDCBW AddConsoleAliasW GetPrivateProfileSectionW LoadLibraryA FindResourceExA DeleteTimerQueue GetFirmwareEnvironmentVariableW GetModuleFileNameW BeginUpdateResourceA GetConsoleAliasExesLengthW EnumTimeFormatsW CopyFileA ReadConsoleOutputCharacterW GetConsoleAliasesLengthA UnhandledExceptionFilter GetProcAddress GetUserDefaultLangID GetSystemWindowsDirectoryW FindFirstChangeNotificationW EndUpdateResourceW WritePrivateProfileStringA EnumResourceNamesA LocalReAlloc AreFileApisANSI GetCurrentDirectoryA GetConsoleAliasesLengthW GetAtomNameA SetFileAttributesW SetConsoleTitleW VerSetConditionMask GetCurrentProcess GetProcessWorkingSetSize GetLongPathNameA GetThreadLocale GetSystemDefaultLCID GetCurrentProcessId GetLastError FindFirstFileExA BuildCommDCBAndTimeoutsA OpenJobObjectA EnterCriticalSection EnumCalendarInfoExW SetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesA GlobalMemoryStatus WriteConsoleOutputCharacterA EnumSystemLocalesA SetLastError CreateFileW LocalAlloc LoadLibraryW GetStringTypeW HeapReAlloc HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess SetFilePointer HeapAlloc HeapCreate ReadFile WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle GetModuleHandleW ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW HeapSize

user32

ClientToScreen

gdi32

GetTextExtentExPointW

winhttp

WinHttpCloseHandle

Name

.text

Size

236KB

Virtual Size

235KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.newajam

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.roxohap

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dojo

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pacira

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3b686cc1989c845c66c604f9dc9731d7.exe

kernel32

user32

gdi32

winhttp