6f9bdd58f6e5339a90ae7c38a963ce4c[.]exe

General

Target
6f9bdd58f6e5339a90ae7c38a963ce4c.exe
Size 730KB
Sample221203-ntewrsbb9t
SHA256 43f822b1220756e8484429635c2de1d11565e1c1de484c735dde760b06033867
MD5 6f9bdd58f6e5339a90ae7c38a963ce4c
SHA1 199064011605cd86388f66865404a7da4d384fa7
SHA512 c8b02a8baa126f984a36d5ee62b6ed24fc9d8e5ba1162c11b8aaa55b9f011968843abfaf6b857046c9d4360d747d77bec1c59795d06132c892fd8c0467113a60
SSDEEP 12288:6gnDX4H5bVSKW4hfNRE2/l7wH0SgiHzHpzGf6O1FujvQB1SfDLoy0uqwF/WB:6AW5bVSKW4hfNpd0GiTpM9FMPoPIA
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

6f9bdd58f6e5339a90ae7c38a963ce4c.exe

.exe 730KB

6f9bdd58f6e5339a90ae7c38a963ce4c.exe

IMPHASH 099d662a2293f03d302e7f9a64bba216
SHA256 43f822b1220756e8484429635c2de1d11565e1c1de484c735dde760b06033867
MD5 6f9bdd58f6e5339a90ae7c38a963ce4c
SHA1 199064011605cd86388f66865404a7da4d384fa7
SHA512 c8b02a8baa126f984a36d5ee62b6ed24fc9d8e5ba1162c11b8aaa55b9f011968843abfaf6b857046c9d4360d747d77bec1c59795d06132c892fd8c0467113a60
SSDEEP 12288:6gnDX4H5bVSKW4hfNRE2/l7wH0SgiHzHpzGf6O1FujvQB1SfDLoy0uqwF/WB:6AW5bVSKW4hfNpd0GiTpM9FMPoPIA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

38166

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize InterlockedExchange GetTickCount CopyFileExA GetConsoleAliasExesLengthW EnumSystemCodePagesA TlsGetValue MoveFileWithProgressW VerifyVersionInfoW LocalUnlock DebugBreak GlobalGetAtomNameW MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW CancelWaitableTimer GetVersionExA FindResourceW OpenEventW SearchPathA GetThreadPriority CallNamedPipeA GetProcAddress GlobalAlloc SetFileTime GetConsoleAliasesLengthA OpenFileMappingA GetComputerNameA GetMailslotInfo GetTapeParameters OpenJobObjectW GetPrivateProfileIntA ReadConsoleInputW _lread LockFile GetPrivateProfileStructW GetDiskFreeSpaceExW DefineDosDeviceW GetACP SetProcessAffinityMask GlobalFindAtomW InterlockedDecrement VerifyVersionInfoA CreateActCtxW GetModuleHandleW FindNextVolumeA MoveFileWithProgressA InterlockedIncrement GetComputerNameW CancelDeviceWakeupRequest EnumCalendarInfoA InterlockedCompareExchange GetPrivateProfileStructA EnumCalendarInfoW EnterCriticalSection GetNamedPipeHandleStateW AreFileApisANSI LoadLibraryA SetLastError WriteConsoleW GetVolumeInformationA GetSystemWindowsDirectoryA LoadLibraryW Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc MoveFileA DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing