b6c0b29ebe8267868911e232716ef58c[.]exe

General

Target
b6c0b29ebe8267868911e232716ef58c.exe
Size 382KB
Sample230104-rf4vhsbg3s
SHA256 c516fc3286df7ec543273f5cce533a9d356c56ab014c2d92337ba420712da32c
MD5 b6c0b29ebe8267868911e232716ef58c
SHA1 e1a074a6e63c0dd8b0f3610721569ab34f753c1c
SHA512 073312d63fb732670693bb77ca02cdf22e5941cf4f95755ae0c45f2f4ad13535fa0dac95969f2cc8baac2d8cc0391308cdcaab490981a2e01867c80304eb93ff
SSDEEP 6144:8eLfz3gMg6qcWnc4Dv5Z97b0Bd9g1ATEdfx3oxupmLIzjT:8eP3NqLnc4Dri39g1M65oxupmL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b6c0b29ebe8267868911e232716ef58c.exe

.exe 382KB

b6c0b29ebe8267868911e232716ef58c.exe

IMPHASH 9ec1d77cd847f96c59fd98d884b6c73b
SHA256 c516fc3286df7ec543273f5cce533a9d356c56ab014c2d92337ba420712da32c
MD5 b6c0b29ebe8267868911e232716ef58c
SHA1 e1a074a6e63c0dd8b0f3610721569ab34f753c1c
SHA512 073312d63fb732670693bb77ca02cdf22e5941cf4f95755ae0c45f2f4ad13535fa0dac95969f2cc8baac2d8cc0391308cdcaab490981a2e01867c80304eb93ff
SSDEEP 6144:8eLfz3gMg6qcWnc4Dv5Z97b0Bd9g1ATEdfx3oxupmLIzjT:8eP3NqLnc4Dri39g1M65oxupmL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

25566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW FreeEnvironmentStringsA GetModuleHandleW GetTickCount ReadConsoleW GetVolumePathNameW LoadLibraryW GetConsoleAliasW GetFileAttributesW MulDiv WriteConsoleW GetEnvironmentVariableA InterlockedExchange ReleaseActCtx GetCPInfoExW SetLastError GetProcAddress VirtualAlloc GetSystemWindowsDirectoryW LoadLibraryA OpenMutexA WriteConsoleA GetProcessWorkingSetSize AddVectoredExceptionHandler SetCommMask FindFirstChangeNotificationA OpenFileMappingW VirtualProtect GetFileAttributesExW WaitForDebugEvent GetCurrentThreadId EndUpdateResourceA FindActCtxSectionStringW GetConsoleSelectionInfo LCMapStringW DeleteVolumeMountPointA GlobalAddAtomA TlsGetValue FindFirstChangeNotificationW SetCriticalSectionSpinCount ResetEvent GetComputerNameA MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA HeapSize RtlUnwind RaiseException SetStdHandle GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthFloatW

advapi32

IsTokenUntrusted BackupEventLogA RegQueryInfoKeyA CloseEventLog

Sharing