d68bd01a1c047679188bd4ba14268249[.]exe

General

Target
d68bd01a1c047679188bd4ba14268249.exe
Size 189KB
Sample221110-h4x77shfdm
SHA256 828a669fddc220845a2cbb3cfca3bf06f60b40fefe044cb627d50bb692d22c67
MD5 d68bd01a1c047679188bd4ba14268249
SHA1 1a3f1ecf879760071cdddc93695dc1980271b7e4
SHA512 40e084b73c4e551687cce55cb49dbdf37c84a994f5422703a173c6838eb8359b33dbc26bad914b050b5c094eb3e80ff9b57993dd06f6c11259bf0ecee6315db5
SSDEEP 3072:WyXWM7gh+t3gLorfzsWB7RXAVyuIMw9N1QLQ5Nhb:5WMuLmfzsWDAVyuNcL3F
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d68bd01a1c047679188bd4ba14268249.exe

.exe 189KB

d68bd01a1c047679188bd4ba14268249.exe

IMPHASH 7ef89c2bc7e7472f6ec1a7ab34bbc339
SHA256 828a669fddc220845a2cbb3cfca3bf06f60b40fefe044cb627d50bb692d22c67
MD5 d68bd01a1c047679188bd4ba14268249
SHA1 1a3f1ecf879760071cdddc93695dc1980271b7e4
SHA512 40e084b73c4e551687cce55cb49dbdf37c84a994f5422703a173c6838eb8359b33dbc26bad914b050b5c094eb3e80ff9b57993dd06f6c11259bf0ecee6315db5
SSDEEP 3072:WyXWM7gh+t3gLorfzsWB7RXAVyuIMw9N1QLQ5Nhb:5WMuLmfzsWDAVyuNcL3F
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32838

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetVolumeInformationA SetComputerNameA LocalFree InterlockedDecrement GetTickCount SearchPathW GetConsoleAliasExesLengthA EnumSystemCodePagesA FindNextFileW TlsGetValue CopyFileExW MoveFileWithProgressA SetVolumeLabelA GetProfileSectionW VerifyVersionInfoA QueryDosDeviceW DosDateTimeToFileTime VirtualProtect WaitForDebugEvent GlobalGetAtomNameA MapViewOfFile GetWindowsDirectoryW GetModuleHandleW VirtualAlloc FindNextVolumeMountPointW IsBadReadPtr DeleteAtom LoadResource WriteConsoleInputW CopyFileW SetWaitableTimer LocalAlloc FindResourceA OpenEventA SearchPathA IsSystemResumeAutomatic CallNamedPipeA GetProcAddress GetModuleHandleA GetConsoleAliasesLengthA OpenFileMappingW GetSystemWindowsDirectoryA GetOEMCP GetMailslotInfo GetConsoleAliasA GetFileInformationByHandle GetDiskFreeSpaceExW DefineDosDeviceA GetCPInfo GetProcessAffinityMask GlobalFindAtomA WriteConsoleA MoveFileWithProgressW InterlockedExchangeAdd VerifyVersionInfoW ZombifyActCtx FindNextVolumeW LeaveCriticalSection GetComputerNameW MoveFileA SetConsoleTitleW GetPrivateProfileStructW InterlockedCompareExchange InterlockedIncrement EnumCalendarInfoW InterlockedExchange GetNamedPipeHandleStateW SetFileApisToANSI AddAtomA CreateFileA CloseHandle Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW

winhttp

WinHttpWriteData

Sharing