db2432e8e08e1b6fd784c26b3a753115[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
db2432e8e08e1b6fd784c26b3a753115.exe
Size 219KB
Sample220714-r2eshshaaj
SHA256 b5b66ebc918b440dbe042fa1ac958ee4bc6a1bb2249a77d69d25d2c9ed4f6dc1
MD5 db2432e8e08e1b6fd784c26b3a753115
SHA1 10a4437551e846d5f7df9fe1ef7cc6c59d767421
SHA512 dd996188fd06717ac3c2ad08a2f94a6d826e669ae38b1c6240ae90d6460e35b611703cbbad820cf2135e3148a41ec8a6cf81baf216aad9dea918f9706232af42
SSDEEP 3072:w0koBX5RSi1FUab5uNcpm3g0I9SAMlfhTqgsxkgaBChcpZa9uD6Vdyhk:NNNFUYU3gFodfKigafwVf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

db2432e8e08e1b6fd784c26b3a753115.exe

.exe 219KB

db2432e8e08e1b6fd784c26b3a753115.exe

IMPHASH 55a2b5a2ae91031aec8b458899df3011
SHA256 b5b66ebc918b440dbe042fa1ac958ee4bc6a1bb2249a77d69d25d2c9ed4f6dc1
MD5 db2432e8e08e1b6fd784c26b3a753115
SHA1 10a4437551e846d5f7df9fe1ef7cc6c59d767421
SHA512 dd996188fd06717ac3c2ad08a2f94a6d826e669ae38b1c6240ae90d6460e35b611703cbbad820cf2135e3148a41ec8a6cf81baf216aad9dea918f9706232af42
SSDEEP 3072:w0koBX5RSi1FUab5uNcpm3g0I9SAMlfhTqgsxkgaBChcpZa9uD6Vdyhk:NNNFUYU3gFodfKigafwVf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

81624

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetLocaleInfoA InterlockedIncrement _lwrite GetCommTimeouts GetSystemDirectoryA CreateEventW WriteConsoleW VerifyVersionInfoA BuildCommDCBW AddConsoleAliasW HeapLock PeekConsoleInputW EnumDateFormatsW ResetEvent UnregisterWait LoadLibraryA WaitNamedPipeW FindResourceExA DeleteTimerQueue GetFirmwareEnvironmentVariableW GetModuleFileNameW BeginUpdateResourceW GetConsoleAliasExesLengthW EnumTimeFormatsW CopyFileA ReadConsoleOutputCharacterA UnhandledExceptionFilter LocalAlloc GetProcAddress GetUserDefaultLangID GetSystemWindowsDirectoryW FindFirstChangeNotificationA EndUpdateResourceW WritePrivateProfileStringA EnumResourceNamesA LocalReAlloc GlobalReAlloc AreFileApisANSI GetCurrentDirectoryA GetConsoleAliasesLengthW GetAtomNameA SetFileAttributesA SetConsoleTitleW VerSetConditionMask GetCurrentProcess GetProcessWorkingSetSize GetLongPathNameW GetThreadLocale GetSystemDefaultLCID GetCurrentProcessId GetLastError SetComputerNameExA FindFirstFileExA BuildCommDCBAndTimeoutsW EnterCriticalSection EnumCalendarInfoExW GetDiskFreeSpaceA GetConsoleAliasExesA GlobalMemoryStatus WriteConsoleOutputCharacterA EnumSystemLocalesA GetComputerNameA VerifyVersionInfoW CreateFileW GetConsoleAliasesLengthA LoadLibraryW GetStringTypeW LCMapStringW HeapReAlloc HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent EncodePointer LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer TerminateProcess SetFilePointer HeapAlloc HeapCreate ReadFile WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle GetModuleHandleW ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind SetStdHandle FlushFileBuffers MultiByteToWideChar RaiseException HeapSize

user32

ClientToScreen

gdi32

GetTextExtentExPointW

winhttp

WinHttpReadData WinHttpCloseHandle

Name

.text

Size

121KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mis

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.remop

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.johagag

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gihajeh

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gic

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

81KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ