ddd7a2ce1924f75632a692b196773db651df23f3143c0[.]exe

General

Target
ddd7a2ce1924f75632a692b196773db651df23f3143c0.exe
Size 442KB
Sample220804-bf3pfsacep
SHA256 ddd7a2ce1924f75632a692b196773db651df23f3143c0481310e6a5cdfdb3b6c
MD5 662edb14e5765a32d4ce7a02c06b6ce2
SHA1 6cfd86c669e05127cd1afff2b93b8310793c9d82
SHA512 1e570a9c6c132d4a21afad3f678b8a4dfab9344c87cd3ecfc6caf64e281f41fbff108f597bde6714fa638cf6c9ef0d5655d10dede6a46bfd0eaee8f55e3ceccc
SSDEEP 12288:qpOtqJvh8v50kSOLHjMPycPKDdvOQV+UVk:+ivJ/TMykKDdJV+2k
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ddd7a2ce1924f75632a692b196773db651df23f3143c0.exe

.exe 442KB

ddd7a2ce1924f75632a692b196773db651df23f3143c0.exe

IMPHASH b22c20e8ba656ac02c99ce4b36129e8e
SHA256 ddd7a2ce1924f75632a692b196773db651df23f3143c0481310e6a5cdfdb3b6c
MD5 662edb14e5765a32d4ce7a02c06b6ce2
SHA1 6cfd86c669e05127cd1afff2b93b8310793c9d82
SHA512 1e570a9c6c132d4a21afad3f678b8a4dfab9344c87cd3ecfc6caf64e281f41fbff108f597bde6714fa638cf6c9ef0d5655d10dede6a46bfd0eaee8f55e3ceccc
SSDEEP 12288:qpOtqJvh8v50kSOLHjMPycPKDdvOQV+UVk:+ivJ/TMykKDdJV+2k
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45744

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA LocalSize VerifyVersionInfoA VerifyVersionInfoW WriteConsoleInputW EnumDateFormatsW FindNextFileW CopyFileExA DnsHostnameToComputerNameW ReadConsoleOutputCharacterW SetConsoleActiveScreenBuffer LockFile GetProfileSectionW QueryDosDeviceW IsSystemResumeAutomatic GetProcessPriorityBoost GetDriveTypeW GlobalGetAtomNameA lstrlenA FindNextVolumeMountPointW TlsGetValue SizeofResource WriteConsoleInputA GetConsoleTitleA GetComputerNameExW OpenEventA CallNamedPipeW GetModuleHandleW GetSystemDirectoryA SetCurrentDirectoryA BuildCommDCBAndTimeoutsA GetProcAddress LoadLibraryA MoveFileWithProgressW GetCommandLineW InterlockedExchange GetConsoleTitleW CopyFileW CreateActCtxA FormatMessageW EnterCriticalSection FindNextVolumeW GetOverlappedResult CreateNamedPipeW GetSystemDefaultLangID GetConsoleAliasesLengthW WriteProfileSectionW AddAtomA InterlockedIncrement HeapFree _hwrite InterlockedExchangeAdd GetStartupInfoW CreateMailslotA IsDBCSLeadByte GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntA GetConsoleAliasExesLengthW DebugBreak SetLastError LoadLibraryW GetComputerNameA VirtualAlloc GetOEMCP lstrcpyA GetConsoleAliasW GetDiskFreeSpaceExW TerminateProcess EnumResourceLanguagesA GetCPInfoExW SetConsoleWindowInfo GlobalGetAtomNameW WriteConsoleA EnumSystemLocalesA FileTimeToSystemTime ResetEvent LockFileEx MoveFileA CreateMutexA FindResourceW SetCommState InterlockedCompareExchange ConvertThreadToFiber GetConsoleFontSize LocalAlloc lstrcpyW HeapLock GetFileAttributesA SetCalendarInfoW GetSystemWindowsDirectoryW GetConsoleAliasesW EnumDateFormatsExW GetComputerNameW GetPrivateProfileStructW OpenWaitableTimerA EnumResourceNamesW FillConsoleOutputCharacterA GetFullPathNameW GetThreadPriority MapUserPhysicalPages WriteConsoleOutputCharacterA OpenJobObjectW CreateFileW BuildCommDCBAndTimeoutsW SetCalendarInfoA GetFileInformationByHandle GetDefaultCommConfigW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess IsDebuggerPresent GetModuleHandleA TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetFilePointer SetHandleCount GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc GetACP GetCPInfo IsValidCodePage FlushFileBuffers GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW InitializeCriticalSectionAndSpinCount SetStdHandle MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharUpperA GetCursorInfo

Name

.text

Size

200KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

171KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rifix

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xuram

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hino

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pebog

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ddd7a2ce1924f75632a692b196773db651df23f3143c0.exe

kernel32

user32