d5dc02c8687ebef624c264487747544b[.]exe

General

Target
d5dc02c8687ebef624c264487747544b.exe
Size 279KB
Sample220705-m99kmsadh4
SHA256 0ed3dad9500ac419c78057fda3da2c98fa5a68e6f871c932140eff327dea4ee4
MD5 d5dc02c8687ebef624c264487747544b
SHA1 a13ab61bcb0a6974e6ce4e9d20a14bb4cf89b4a4
SHA512 6bc0d33e560556c42487d8c9938a7f8995f701a29db2bc037a260125bb59fd8870d8d34bc0ca0550ec566c2b6d1263ebf56d865f2f906b4ddd066a4b778d2381
SSDEEP 6144:3m/3bY+4d+3bWq4AzhrSBfkD5hWJxZeG68UVuDsk:3K374dyF4AzhrS25hWJje6cuD
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d5dc02c8687ebef624c264487747544b.exe

.exe 279KB

d5dc02c8687ebef624c264487747544b.exe

IMPHASH 56c1f1bd76fb06f3d91fa8acfd6c0001
SHA256 0ed3dad9500ac419c78057fda3da2c98fa5a68e6f871c932140eff327dea4ee4
MD5 d5dc02c8687ebef624c264487747544b
SHA1 a13ab61bcb0a6974e6ce4e9d20a14bb4cf89b4a4
SHA512 6bc0d33e560556c42487d8c9938a7f8995f701a29db2bc037a260125bb59fd8870d8d34bc0ca0550ec566c2b6d1263ebf56d865f2f906b4ddd066a4b778d2381
SSDEEP 6144:3m/3bY+4d+3bWq4AzhrSBfkD5hWJxZeG68UVuDsk:3K374dyF4AzhrS25hWJje6cuD
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

46560

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenProcess GetNamedPipeHandleStateA GetQueuedCompletionStatus FillConsoleOutputCharacterA EnumSystemCodePagesW LocalLock GetVolumeNameForVolumeMountPointA GetVersionExA VerifyVersionInfoA WriteConsoleInputW EnumDateFormatsW FindNextFileA CopyFileExW BuildCommDCBAndTimeoutsA VirtualLock WriteProfileStringA VerifyVersionInfoW GetDriveTypeW GetFileInformationByHandle DeleteFileA FindNextVolumeMountPointW TlsGetValue ResetWriteWatch GetConsoleTitleW GetComputerNameExW GetTimeZoneInformation GetModuleHandleA GetSystemDirectoryA GetDriveTypeA LoadLibraryA GetShortPathNameW ReleaseActCtx GetProfileSectionW DeleteFileW GetCommandLineA InterlockedExchangeAdd InterlockedDecrement CreateActCtxW FindResourceA FormatMessageA GetModuleFileNameA CreateJobObjectW InitializeCriticalSection GetNumberOfConsoleMouseButtons FindNextVolumeA CreateNamedPipeW WritePrivateProfileStringA GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA InterlockedIncrement GetVersionExW HeapFree _hread InterlockedCompareExchange GetStartupInfoW ConnectNamedPipe GetCPInfoExA GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntW GetConsoleAliasExesW DebugBreak EndUpdateResourceA GetTickCount VirtualQueryEx DeleteVolumeMountPointA OpenFileMappingA GetModuleHandleW SetDefaultCommConfigA VirtualAlloc GetSystemWindowsDirectoryA TerminateProcess GetACP GetDiskFreeSpaceExA EnumResourceTypesA IsProcessInJob lstrcpynW WriteConsoleW GetProcAddress lstrcpyA LoadLibraryW ReadConsoleOutputW SetHandleInformation WritePrivateProfileSectionA DeleteCriticalSection GetFileAttributesA DeactivateActCtx CopyFileW GlobalMemoryStatus SetTapeParameters GetDevicePowerState ResetEvent LockFile MoveFileA DisableThreadLibraryCalls GetOverlappedResult SetCommTimeouts GlobalAlloc SetThreadPriorityBoost SetFileShortNameW GetFileAttributesW SetCalendarInfoA ConvertFiberToThread GetConsoleTitleA SetComputerNameW GetConsoleAliasesA EnumDateFormatsA SetConsoleOutputCP MoveFileWithProgressW GetStdHandle GetLocalTime EnumSystemLocalesW ActivateActCtx OpenSemaphoreA GetModuleHandleExA FoldStringW GetFileSize SetUnhandledExceptionFilter GetConsoleAliasesLengthA SetProcessShutdownParameters lstrcpynA GlobalUnWire FillConsoleOutputCharacterW GetCompressedFileSizeA ReadConsoleA FreeUserPhysicalPages WriteConsoleOutputCharacterW TerminateJobObject CreateFileA SetTimerQueueTimer SetLastError UnhandledExceptionFilter RaiseException GetStartupInfoA HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess IsDebuggerPresent CloseHandle SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep ExitProcess QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate VirtualFree HeapAlloc HeapSize HeapReAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA OutputDebugStringW FlushFileBuffers WriteConsoleA GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

Name

.text

Size

186KB

Virtual Size

186KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rof

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wic

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zoy

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nam

Size

512B

Virtual Size

50B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d5dc02c8687ebef624c264487747544b.exe

kernel32