5dacbb9b99f1c0d67cb623338885c166[.]exe

General

Target
5dacbb9b99f1c0d67cb623338885c166.exe
Size 332KB
Sample220628-rhtsbshhdn
SHA256 d0935b33a6b2b816ff1183e6d20f5c56228e39adfd0c8504bc7d0e8c67294dee
MD5 5dacbb9b99f1c0d67cb623338885c166
SHA1 5c5461348f0beb391f5a302c8b46a9757a586352
SHA512 f21d19b572312c2f4e10589c4b2b1e62f23a6f595c3bbfe3c3a73b1c9a7bd099e2b62434d5fd2c781b32476dfed2ff6830f570cb446baefb5b35ade4935f6725
SSDEEP 6144:E7KKY4vlwTzU3MO1lcyQN+dmMmTr1f9igafwVf:9KpvlwftO1lcyo+dPmTr6
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5dacbb9b99f1c0d67cb623338885c166.exe

.exe 332KB

5dacbb9b99f1c0d67cb623338885c166.exe

IMPHASH 1ca2e0737b3486190e8a82e2c659a784
SHA256 d0935b33a6b2b816ff1183e6d20f5c56228e39adfd0c8504bc7d0e8c67294dee
MD5 5dacbb9b99f1c0d67cb623338885c166
SHA1 5c5461348f0beb391f5a302c8b46a9757a586352
SHA512 f21d19b572312c2f4e10589c4b2b1e62f23a6f595c3bbfe3c3a73b1c9a7bd099e2b62434d5fd2c781b32476dfed2ff6830f570cb446baefb5b35ade4935f6725
SSDEEP 6144:E7KKY4vlwTzU3MO1lcyQN+dmMmTr1f9igafwVf:9KpvlwftO1lcyo+dPmTr6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

197400

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetLocaleInfoA InterlockedIncrement _lwrite SetCommTimeouts GetSystemDirectoryA CreateEventW WriteConsoleW VerifyVersionInfoW WaitNamedPipeW BuildCommDCBW AddConsoleAliasW GetPrivateProfileSectionW LoadLibraryA FindResourceExA DeleteTimerQueue GetFirmwareEnvironmentVariableW GetModuleFileNameW BeginUpdateResourceA GetConsoleAliasExesLengthW EnumTimeFormatsW CopyFileA ReadConsoleOutputCharacterW GetConsoleAliasesLengthA UnhandledExceptionFilter GetProcAddress GetUserDefaultLangID GetSystemWindowsDirectoryW FindFirstChangeNotificationW EndUpdateResourceW WritePrivateProfileStringA EnumResourceNamesA LocalReAlloc AreFileApisANSI GetCurrentDirectoryA GetConsoleAliasesLengthW GetAtomNameA SetFileAttributesW SetConsoleTitleW VerSetConditionMask GetCurrentProcess GetProcessWorkingSetSize GetLongPathNameA GetThreadLocale GetSystemDefaultLCID GetCurrentProcessId GetLastError FindFirstFileExA BuildCommDCBAndTimeoutsA OpenJobObjectA EnterCriticalSection EnumCalendarInfoExW SetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesA GlobalMemoryStatus WriteConsoleOutputCharacterA EnumSystemLocalesA CreateFileW LocalAlloc LoadLibraryW GetStringTypeW HeapReAlloc HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer TerminateProcess SetFilePointer HeapAlloc HeapCreate ReadFile WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle GetModuleHandleW ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind SetStdHandle FlushFileBuffers MultiByteToWideChar RaiseException LCMapStringW HeapSize

user32

ClientToScreen

gdi32

GetTextExtentExPointW

winhttp

WinHttpCloseHandle

Name

.text

Size

234KB

Virtual Size

233KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.noh

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fimedic

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.taw

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rafobi

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5dacbb9b99f1c0d67cb623338885c166.exe

kernel32

user32

gdi32

winhttp