ddb7aacfd5a91b7c42eb39bc8e89f91d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ddb7aacfd5a91b7c42eb39bc8e89f91d.exe
Size 175KB
Sample230119-jcy6vsfd44
SHA256 0d4acbb0dfd04d6b5d7f19a08b43c2c15e63dcf972301d33026e477da135d53a
MD5 ddb7aacfd5a91b7c42eb39bc8e89f91d
SHA1 202bbd1ce950039e20e36f8a981a3c7c37d85b03
SHA512 730500b4fb7e1ed79c6b836b8b470a6d9953ae612af2e923fd5a6073d964bdb2e3f0e6b717ce9986a2b56287a9b4413ce37bd2621200ac9c4b309a62bfd87884
SSDEEP 3072:NXEWX2P8cZFUnKqIL15Rm4diOLwNjGu/Zv6lG7FIiirqF:J52lPqILgvx6GJb
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ddb7aacfd5a91b7c42eb39bc8e89f91d.exe

.exe 175KB

ddb7aacfd5a91b7c42eb39bc8e89f91d.exe

IMPHASH 00ddad892f8297a283e3a08b8010afa2
SHA256 0d4acbb0dfd04d6b5d7f19a08b43c2c15e63dcf972301d33026e477da135d53a
MD5 ddb7aacfd5a91b7c42eb39bc8e89f91d
SHA1 202bbd1ce950039e20e36f8a981a3c7c37d85b03
SHA512 730500b4fb7e1ed79c6b836b8b470a6d9953ae612af2e923fd5a6073d964bdb2e3f0e6b717ce9986a2b56287a9b4413ce37bd2621200ac9c4b309a62bfd87884
SSDEEP 3072:NXEWX2P8cZFUnKqIL15Rm4diOLwNjGu/Zv6lG7FIiirqF:J52lPqILgvx6GJb
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26676

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsA ReadConsoleInputW GetComputerNameExW GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringA GetProcAddress GlobalAlloc IsDebuggerPresent VerifyVersionInfoA FindActCtxSectionStringA GetLastError GetConsoleAliasW CreateNamedPipeW GlobalFlags GetModuleHandleA CopyFileW DosDateTimeToFileTime lstrlenA TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW CreateMailslotA WriteConsoleInputW InterlockedCompareExchange EnumTimeFormatsW VerifyVersionInfoW FindNextFileA FreeEnvironmentStringsW GetProcessPriorityBoost GetNumberOfConsoleInputEvents GetConsoleTitleW LoadLibraryW LoadLibraryA ReadFile WriteConsoleW GetConsoleOutputCP MultiByteToWideChar WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapAlloc Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA DeleteFileA

user32

GetMessageExtraInfo

gdi32

GetColorAdjustment GetBrushOrgEx

advapi32

SetThreadToken

winhttp

WinHttpCreateUrl

msimg32

TransparentBlt