b6d7196e1f35cb27c415e70aff17ff77[.]exe

General

Target
b6d7196e1f35cb27c415e70aff17ff77.exe
Size 399KB
Sample221210-nbehaafe22
SHA256 e43527558b3c86ee60badbfc76fe825136abd935181a71f753d3fa8288e3d04d
MD5 b6d7196e1f35cb27c415e70aff17ff77
SHA1 74625a04a2e031cda81ba99ea82f4b46cd6f7e72
SHA512 6ee878994ece9aef146133db9a0ea7cfd395a0e40e63334b0a8c0f431746ad7347a9b59a8b0b9a02fbd9639ac65197c32087c6ee821753418964eec8842d9976
SSDEEP 6144:m0jPd70L0yX8QBREVuyAYYWP9o45aB+p2SrNJtAm0zxDYG0ZrrMC7C9:pjPeAyX8QBRauhBy9ovYpHS/uRQEC9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b6d7196e1f35cb27c415e70aff17ff77.exe

.exe 399KB

b6d7196e1f35cb27c415e70aff17ff77.exe

IMPHASH 4f2d8566e33b10a41f27f335ecf266e2
SHA256 e43527558b3c86ee60badbfc76fe825136abd935181a71f753d3fa8288e3d04d
MD5 b6d7196e1f35cb27c415e70aff17ff77
SHA1 74625a04a2e031cda81ba99ea82f4b46cd6f7e72
SHA512 6ee878994ece9aef146133db9a0ea7cfd395a0e40e63334b0a8c0f431746ad7347a9b59a8b0b9a02fbd9639ac65197c32087c6ee821753418964eec8842d9976
SSDEEP 6144:m0jPd70L0yX8QBREVuyAYYWP9o45aB+p2SrNJtAm0zxDYG0ZrrMC7C9:pjPeAyX8QBRauhBy9ovYpHS/uRQEC9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28534

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesA WaitNamedPipeW GetVolumePathNameW GetVolumeInformationA LoadLibraryW IsProcessInJob AssignProcessToJobObject GetCalendarInfoA EnumSystemCodePagesA GetFileAttributesW WriteConsoleW SetThreadPriority LCMapStringA FillConsoleOutputCharacterW GetComputerNameW GetProcAddress VirtualAlloc SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc SetProcessWorkingSetSize OpenJobObjectW FoldStringW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle AddConsoleAliasA GetProfileIntW CreateJobObjectW TlsGetValue GetLastError GetFullPathNameA HeapFree HeapAlloc Sleep ExitProcess GetStartupInfoW HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

gdi32

GetTextExtentExPointW

advapi32

BackupEventLogA ReportEventW

Sharing