5f6d69736d3375c7598fe277f54e61c9[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
5f6d69736d3375c7598fe277f54e61c9.exe
Size 72KB
Sample220906-bxc55adaa3
SHA256 571de8219bf86b49ea252c45a0b42e3263af6be74a710ef496b5418ea990fe6e
MD5 5f6d69736d3375c7598fe277f54e61c9
SHA1 4feb8bb6a4bb328e6aa3da4dceff752c87e3e1be
SHA512 ca64c53680268cad0b18f2ac43bc5ea22bafeda7f5bf832f2692bddf719a0d4c851ac8d0dbdcd597f36157024f52e53b2209c09105a876f4357e883bca892383
SSDEEP 768:QKvHz44fLffEdN3Jqq2QA/qB4z2m77sYcA76hkJt/XEiCKPlUlWPe1t5uNC/hpH5:vvs4DfCNUmkv77lw/clUkPnihrqI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5f6d69736d3375c7598fe277f54e61c9.exe

.exe 72KB

5f6d69736d3375c7598fe277f54e61c9.exe

IMPHASH 46be82ecd96300ec7ce610dc0f6e3bf0
SHA256 571de8219bf86b49ea252c45a0b42e3263af6be74a710ef496b5418ea990fe6e
MD5 5f6d69736d3375c7598fe277f54e61c9
SHA1 4feb8bb6a4bb328e6aa3da4dceff752c87e3e1be
SHA512 ca64c53680268cad0b18f2ac43bc5ea22bafeda7f5bf832f2692bddf719a0d4c851ac8d0dbdcd597f36157024f52e53b2209c09105a876f4357e883bca892383
SSDEEP 768:QKvHz44fLffEdN3Jqq2QA/qB4z2m77sYcA76hkJt/XEiCKPlUlWPe1t5uNC/hpH5:vvs4DfCNUmkv77lw/clUkPnihrqI
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

5328

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CreateProcessA DeleteCriticalSection EnterCriticalSection GetCommandLineA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleFileNameA GetModuleHandleW GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount HeapAlloc HeapCreate InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MultiByteToWideChar QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func __dllonexit __getmainargs __initenv __iob_func __lconv_init __mb_cur_max __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _errno _fmode _initterm _lock _onexit _strrev _unlock abort calloc exit fprintf fputc free fwrite getc getenv islower isspace isupper isxdigit localeconv malloc memcpy memmove realloc signal strcpy strerror strlen strncmp strncpy strtok strtol strtoul tolower ungetc vfprintf wcslen

user32

EnumWindows

Name

.text

Size

56KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE