2f3d0323ba962334ef87ed098ad02289[.]exe

General

Target
2f3d0323ba962334ef87ed098ad02289.exe
Size 438KB
Sample220802-qhs1csfbd6
SHA256 12a51367c5c85ff3c1dc73743cface2e01accecf2879a36adbddf566d52987b3
MD5 2f3d0323ba962334ef87ed098ad02289
SHA1 5b4c70e331af83eaf384f45a01e322b094353375
SHA512 1e33ace1068f614bfac35aa67733c2806328b586be273a611409df87be03c5edc9e312ab213004c8fab71453ef5e34e474d9273c4a97d95d135c18f440674ad3
SSDEEP 12288:7mDzFYoqpubP85HDjsV6th1Uevo6wgQnzQ5mF8Y:iDzuoJbk5jj66thKQLZkaY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

2f3d0323ba962334ef87ed098ad02289.exe

.exe 438KB

2f3d0323ba962334ef87ed098ad02289.exe

IMPHASH 42657d19719e5309592e5bc5fbb92b8e
SHA256 12a51367c5c85ff3c1dc73743cface2e01accecf2879a36adbddf566d52987b3
MD5 2f3d0323ba962334ef87ed098ad02289
SHA1 5b4c70e331af83eaf384f45a01e322b094353375
SHA512 1e33ace1068f614bfac35aa67733c2806328b586be273a611409df87be03c5edc9e312ab213004c8fab71453ef5e34e474d9273c4a97d95d135c18f440674ad3
SSDEEP 12288:7mDzFYoqpubP85HDjsV6th1Uevo6wgQnzQ5mF8Y:iDzuoJbk5jj66thKQLZkaY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

47504

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerifyVersionInfoA VerifyVersionInfoW WriteConsoleInputW EnumDateFormatsW FindNextFileW CopyFileExA DnsHostnameToComputerNameW ReadConsoleOutputCharacterW SetConsoleActiveScreenBuffer LockFile GetProfileSectionA QueryDosDeviceW IsSystemResumeAutomatic GetProcessPriorityBoost GetDriveTypeW GlobalGetAtomNameA lstrlenA FindNextVolumeMountPointW TlsGetValue SizeofResource WriteConsoleInputA GetConsoleTitleW GetComputerNameExW OpenEventA CallNamedPipeW GetModuleHandleW GetSystemDirectoryA SetCurrentDirectoryA BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA MoveFileWithProgressW GetCommandLineW InterlockedIncrement InterlockedExchange CopyFileW CreateActCtxW FormatMessageW EnterCriticalSection FindNextVolumeW GetOverlappedResult LoadLibraryA CreateNamedPipeW GetSystemDefaultLangID GetConsoleAliasesLengthA WriteProfileSectionW AddAtomW InterlockedDecrement HeapFree _hwrite InterlockedExchangeAdd GetStartupInfoW CreateMailslotW GetCPInfoExW GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntA GetConsoleAliasExesLengthW DebugBreak SetLastError LoadLibraryW GetDefaultCommConfigA VirtualAlloc GetACP lstrcpyA GetConsoleAliasA FindNextFileA TerminateProcess EnumResourceLanguagesA SetConsoleTextAttribute GlobalGetAtomNameW CreateJobSet lstrcpynA EnumSystemLocalesA GetPrivateProfileSectionNamesW OpenMutexW FileTimeToSystemTime CopyFileA GlobalWire GetTapeParameters lstrcmpW SetEvent MoveFileA CreateMutexA FindResourceW GetCommState FormatMessageA InterlockedCompareExchange CreateFiber GetConsoleFontSize LocalAlloc SetFileShortNameA lstrcpyW HeapLock GetFileAttributesA SetCalendarInfoW GetSystemWindowsDirectoryW GetConsoleAliasesW EnumDateFormatsExW GetComputerNameW GetPrivateProfileStructW _hread LocalSize OpenWaitableTimerA EnumResourceNamesW CreateFileMappingW SetUnhandledExceptionFilter GetSystemTimeAdjustment SetProcessShutdownParameters lstrcpynW GetThreadSelectorEntry GetNamedPipeHandleStateA FillConsoleOutputCharacterA GetFullPathNameW GetThreadPriority WriteConsoleA AddAtomA FreeUserPhysicalPages WriteConsoleOutputCharacterW OpenJobObjectW CreateFileW BuildCommDCBAndTimeoutsW GetBinaryTypeW SetCalendarInfoA GetFileAttributesW GetFileInformationByHandle GetProfileSectionW CommConfigDialogW GetDiskFreeSpaceExA LocalFree Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind WideCharToMultiByte GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr UnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetOEMCP GetCPInfo IsValidCodePage SetFilePointer SetHandleCount GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleOutputCP CloseHandle CreateFileA

user32

CharToOemBuffW CharUpperA GetCursorInfo

advapi32

AbortSystemShutdownW

Name

.text

Size

201KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

166KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zonami

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yosozi

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.may

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2f3d0323ba962334ef87ed098ad02289.exe

kernel32

user32

advapi32