a6c3dd2e24d8c37356be5333c1a87f18[.]exe

General

Target
a6c3dd2e24d8c37356be5333c1a87f18.exe
Size 402KB
Sample220730-jsn1tshhgj
SHA256 5536cc8bdfe9ea10e4e48dd42301aad98dafe31c6aa998723478249e2fb37fb4
MD5 a6c3dd2e24d8c37356be5333c1a87f18
SHA1 3f3ee42062051d814210a24125a19ec70bea21d7
SHA512 78da93fe87af2798d440c9d7ed03ce32f8d88d3519d975e3ca1e32af1af032b836f10810e16bc093ba95517dc2c5c07063eeb4e0f3f944300083e99185ea4494
SSDEEP 6144:PEJUN7p8CjBvFFg7e0+j5RJ77yPIoEXrbBXzDBHsCmw7kuo22xPdEXqvWI:ckpLjBs7e0+97ef0BRsP6kC2xWa
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

a6c3dd2e24d8c37356be5333c1a87f18.exe

.exe 402KB

a6c3dd2e24d8c37356be5333c1a87f18.exe

IMPHASH 18d6edbf6cd270b11d781857738bea6a
SHA256 5536cc8bdfe9ea10e4e48dd42301aad98dafe31c6aa998723478249e2fb37fb4
MD5 a6c3dd2e24d8c37356be5333c1a87f18
SHA1 3f3ee42062051d814210a24125a19ec70bea21d7
SHA512 78da93fe87af2798d440c9d7ed03ce32f8d88d3519d975e3ca1e32af1af032b836f10810e16bc093ba95517dc2c5c07063eeb4e0f3f944300083e99185ea4494
SSDEEP 6144:PEJUN7p8CjBvFFg7e0+j5RJ77yPIoEXrbBXzDBHsCmw7kuo22xPdEXqvWI:ckpLjBs7e0+97ef0BRsP6kC2xWa
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

46080

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerifyVersionInfoW WriteConsoleInputA EnumDateFormatsW CopyFileExW DnsHostnameToComputerNameW FindNextFileW ReadConsoleOutputCharacterW SetConsoleActiveScreenBuffer LockFile GetProfileSectionW QueryDosDeviceW RequestWakeupLatency GetProcessPriorityBoost GetDriveTypeW GlobalGetAtomNameA DeleteFileW FindNextVolumeMountPointW TlsSetValue SizeofResource WriteConsoleInputW GetConsoleTitleW GetComputerNameExW OpenEventA CallNamedPipeA GetModuleHandleA GetSystemDirectoryA GetDriveTypeA BuildCommDCBAndTimeoutsA GetProcAddress GetShortPathNameA DeleteFileA GetCommandLineW InterlockedIncrement InterlockedExchange CopyFileW CreateActCtxW FormatMessageA GetModuleHandleW EnterCriticalSection FindNextVolumeA CreateIoCompletionPort LoadLibraryA CreateNamedPipeA GetSystemDefaultLangID GetConsoleAliasesLengthA WriteProfileSectionW AddAtomW InterlockedDecrement HeapFree _hread InterlockedCompareExchange GetStartupInfoW CreateMailslotW GetCPInfoExW GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntW GetConsoleAliasExesLengthW WaitForDebugEvent SetLastError VerifyVersionInfoA GetDefaultCommConfigA VirtualAlloc GetACP lstrcatW GetConsoleAliasA GetDiskFreeSpaceExA TerminateProcess EnumResourceLanguagesA SetConsoleTextAttribute GlobalGetAtomNameW CreateJobSet MoveFileW GetComputerNameW EnumSystemLocalesA WritePrivateProfileSectionW WritePrivateProfileStructA GetPrivateProfileSectionNamesW GetFileAttributesW FileTimeToSystemTime SetTapeParameters lstrcmpW SetEvent MoveFileA CreateMutexW FindResourceA GetCommState CreateFiber GetConsoleFontSize LocalAlloc SetFileShortNameA lstrcpyW HeapLock GetFileAttributesA SetCalendarInfoW GetSystemWindowsDirectoryW SetComputerNameA GetConsoleAliasesW EnumDateFormatsExW GetPrivateProfileStructW LocalFlags OpenWaitableTimerA EnumResourceNamesW CreateFileMappingA SetProcessShutdownParameters lstrcpynW GetFullPathNameA WriteConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectW CreateFileA SetCurrentDirectoryA GlobalWire GetFileInformationByHandle CommConfigDialogW CloseHandle LoadLibraryW LocalFree Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind WideCharToMultiByte GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetFilePointer QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

CharToOemBuffW CharUpperW GetMessageTime LoadMenuW

advapi32

InitiateSystemShutdownW

Name

.text

Size

198KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

172KB

Virtual Size

208KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zorix

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fewi

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tuv

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a6c3dd2e24d8c37356be5333c1a87f18.exe

kernel32

user32

advapi32