5bfff4bdf3ca6b94564b5d3487ee586d[.]exe

General

Target
5bfff4bdf3ca6b94564b5d3487ee586d.exe
Size 187KB
Sample221110-dcqltsebd6
SHA256 00f012914ab9215fdfb36097ffb415f01561b2289eabefab4057d3d175ea025d
MD5 5bfff4bdf3ca6b94564b5d3487ee586d
SHA1 103dfd1adde387f0a7b6de39b513ca88f4335128
SHA512 44d090debe745bdc315505da4a5791e4f889c6229c7e33340181346d1f1d47a7bd7d9a43ed640a2dde7f5ac3768e0032c7b88435128847328d26dd483b622074
SSDEEP 3072:plXNx1LSe+BPLGRPOrJR6OFQtowSR/nx5e1yU0JcXRsLR8nHB:PNTmlLGRPOZF8UR0ypLKnh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5bfff4bdf3ca6b94564b5d3487ee586d.exe

.exe 187KB

5bfff4bdf3ca6b94564b5d3487ee586d.exe

IMPHASH 555a1039e846788e46de9b61bebb85a0
SHA256 00f012914ab9215fdfb36097ffb415f01561b2289eabefab4057d3d175ea025d
MD5 5bfff4bdf3ca6b94564b5d3487ee586d
SHA1 103dfd1adde387f0a7b6de39b513ca88f4335128
SHA512 44d090debe745bdc315505da4a5791e4f889c6229c7e33340181346d1f1d47a7bd7d9a43ed640a2dde7f5ac3768e0032c7b88435128847328d26dd483b622074
SSDEEP 3072:plXNx1LSe+BPLGRPOrJR6OFQtowSR/nx5e1yU0JcXRsLR8nHB:PNTmlLGRPOZF8UR0ypLKnh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32358

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationW SetComputerNameA EnumSystemCodePagesA LocalFree FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect DebugBreak GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange GetConsoleAliasExesLengthA InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW AreFileApisANSI GetTickCount AddAtomW CreateFileA CloseHandle InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError DeleteFileA GetStartupInfoW HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId VirtualFree HeapReAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing