02[.]08[.]2022[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
02.08.2022.exe
Size 13.0MB
Sample221109-ndp2ssgdd3
SHA256 db9a6efd5d64ba0ba1783c51b6d430873518fa032bf5265c6837c7674321e183
MD5 4b841b2225c04a0352899ed423d360a0
SHA1 296f7044fbe267530a3ec2c42358dfbc888be716
SHA512 cd253c912596ef3dac3cb6bda45d39dfd02aea02a08ac3d10fc4c01f9abfb3774ca26550aa763023329864ee1c3febae68094914799de0491afebda0577df19b
SSDEEP 393216:y/BXKlKJgjelKYITBPoOpLKBO1IlVJHYShYfLN:mXQKJgjeluQoOBMIvJH8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

02.08.2022.exe

.exe 13.0MB

02.08.2022.exe

IMPHASH d1de500e42d2702177623521d4e86120
SHA256 db9a6efd5d64ba0ba1783c51b6d430873518fa032bf5265c6837c7674321e183
MD5 4b841b2225c04a0352899ed423d360a0
SHA1 296f7044fbe267530a3ec2c42358dfbc888be716
SHA512 cd253c912596ef3dac3cb6bda45d39dfd02aea02a08ac3d10fc4c01f9abfb3774ca26550aa763023329864ee1c3febae68094914799de0491afebda0577df19b
SSDEEP 393216:y/BXKlKJgjelKYITBPoOpLKBO1IlVJHYShYfLN:mXQKJgjeluQoOBMIvJH8
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

4342

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

imagehlp

MapAndLoad UnMapAndLoad

kernel32

CloseHandle CreateDirectoryW CreateFileW CreateProcessW DeleteCriticalSection EnterCriticalSection FormatMessageA FreeLibrary GenerateConsoleCtrlEvent GetCommandLineW GetCurrentProcessId GetExitCodeProcess GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetProcessId GetShortPathNameW GetStartupInfoW GetSystemTimeAsFileTime GetTempPathW InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA MultiByteToWideChar ReadFile SetConsoleCtrlHandler SetEnvironmentVariableA SetFilePointer SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __lconv_init __set_app_type __setusermatherr __wargv __wgetmainargs __winitenv _amsg_exit _cexit _commode _errno _fmode _initterm _lock _onexit _putws _unlock _wcmdln _wcsicmp abort calloc exit fprintf fputc free fwrite localeconv malloc mbstowcs memcpy memmove memset puts signal strerror strlen strncmp vfprintf wcslen wcstombs_s

shell32

SHFileOperationW

Name

.text

Size

111KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ