b687f38bc8068679a568baf1ba176285[.]exe

General

Target
b687f38bc8068679a568baf1ba176285.exe
Size 403KB
Sample220730-284qbsdbbr
SHA256 c4cde60e4be18f830ea604097347f79e20f4659eae724d330196b27273daf436
MD5 b687f38bc8068679a568baf1ba176285
SHA1 845fb6fd2ab472e04db98dcd3e1801b664a994ed
SHA512 51408060a81baadf359b89d15b2a7aa4981457efac8bb5e1bc10dc5a6a2c18d30afb0cec5c85c1cadb57684c2ea052ae268d0b54bc1fc6c0b4fa63a8aaed214a
SSDEEP 6144:KSSpn2HbBu8FNnUyE9y7ojE3Hkooiv8mfsslKckFsyG8jem0SIVlEAI:zSMbg8NnRQyQEqi13K7G8jgXE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b687f38bc8068679a568baf1ba176285.exe

.exe 403KB

b687f38bc8068679a568baf1ba176285.exe

IMPHASH 5484ce5c455789abe08c01ba8c35b619
SHA256 c4cde60e4be18f830ea604097347f79e20f4659eae724d330196b27273daf436
MD5 b687f38bc8068679a568baf1ba176285
SHA1 845fb6fd2ab472e04db98dcd3e1801b664a994ed
SHA512 51408060a81baadf359b89d15b2a7aa4981457efac8bb5e1bc10dc5a6a2c18d30afb0cec5c85c1cadb57684c2ea052ae268d0b54bc1fc6c0b4fa63a8aaed214a
SSDEEP 6144:KSSpn2HbBu8FNnUyE9y7ojE3Hkooiv8mfsslKckFsyG8jem0SIVlEAI:zSMbg8NnRQyQEqi13K7G8jgXE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

47152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerifyVersionInfoA VerifyVersionInfoW WriteConsoleInputA EnumDateFormatsW FindNextFileW CopyFileExA DnsHostnameToComputerNameW ReadConsoleOutputCharacterW SetConsoleActiveScreenBuffer LockFile GetProfileSectionA QueryDosDeviceW IsSystemResumeAutomatic GetProcessPriorityBoost GetDriveTypeW GlobalGetAtomNameA lstrlenA FindNextVolumeMountPointW TlsGetValue SizeofResource WriteConsoleInputW GetConsoleTitleW GetComputerNameExW OpenEventA CallNamedPipeA GetModuleHandleW GetSystemDirectoryA SetCurrentDirectoryA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA MoveFileWithProgressW GetCommandLineW InterlockedIncrement InterlockedExchange CopyFileW CreateActCtxW FormatMessageW EnterCriticalSection FindNextVolumeW CreateIoCompletionPort LoadLibraryA CreateNamedPipeW GetSystemDefaultLangID GetConsoleAliasesLengthA WriteProfileSectionW AddAtomW InterlockedDecrement HeapFree _hwrite InterlockedCompareExchange GetStartupInfoW CreateMailslotW GetCPInfoExW GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntW GetConsoleAliasExesLengthW DebugBreak SetLastError LoadLibraryW FindNextFileA VirtualAlloc GetACP lstrcpyA GetConsoleAliasA GetDiskFreeSpaceExA TerminateProcess EnumResourceLanguagesA SetConsoleTextAttribute GlobalGetAtomNameW CreateJobSet MoveFileW lstrcpynA EnumSystemLocalesA GetPrivateProfileSectionNamesW OpenMutexW GetFileAttributesW FileTimeToSystemTime CopyFileA GlobalWire GetTapeParameters lstrcmpW SetEvent MoveFileA CreateMutexA FindResourceW GetCommState FormatMessageA CreateFiber GetConsoleFontSize LocalAlloc SetFileShortNameA lstrcpyW HeapLock GetFileAttributesA SetCalendarInfoW GetSystemWindowsDirectoryW GetConsoleAliasesW EnumDateFormatsExW GetComputerNameW GetPrivateProfileStructW _hread LocalFlags OpenWaitableTimerA EnumResourceNamesW CreateFileMappingW SetProcessShutdownParameters lstrcpynW GetThreadSelectorEntry WriteConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectW CreateFileW GetFileInformationByHandle GetProfileSectionW CommConfigDialogW CreateFileA GetDefaultCommConfigA LocalFree Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind WideCharToMultiByte GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetFilePointer SetHandleCount GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode OutputDebugStringA OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle

user32

CharToOemBuffW CharUpperA GetMessageTime LoadMenuA

advapi32

AbortSystemShutdownW

Name

.text

Size

201KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

172KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fimaf

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xaye

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yefe

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b687f38bc8068679a568baf1ba176285.exe

kernel32

user32

advapi32