20db61ccb52632444a492cffbbc986de[.]exe

General

Target
20db61ccb52632444a492cffbbc986de.exe
Size 335KB
Sample230201-rykvcsca4s
SHA256 7a0b21299484bd83d27963c5ae20bbe1ff83961cf156e7a54fefb463f9d3f477
MD5 20db61ccb52632444a492cffbbc986de
SHA1 833e7f22a08c4962b54ce1bdf81608362d50dea8
SHA512 08bc178f6dbb7b38d50e34af3645543fca1c209c0c6bf35fc478934e6e256e014cac1e1b2b4666b346b8d6dd6b629cc675569a657a00d88b333ed03f7ff20467
SSDEEP 6144:pWguCR+LCgOy9jeL0h8Y/NnJxdZFWSiR1e6q+w:pWtE+WgOyj448+NHdbWSi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

20db61ccb52632444a492cffbbc986de.exe

.exe 335KB

20db61ccb52632444a492cffbbc986de.exe

IMPHASH 1bd819fed1b7e1f177cee8ab49452c78
SHA256 7a0b21299484bd83d27963c5ae20bbe1ff83961cf156e7a54fefb463f9d3f477
MD5 20db61ccb52632444a492cffbbc986de
SHA1 833e7f22a08c4962b54ce1bdf81608362d50dea8
SHA512 08bc178f6dbb7b38d50e34af3645543fca1c209c0c6bf35fc478934e6e256e014cac1e1b2b4666b346b8d6dd6b629cc675569a657a00d88b333ed03f7ff20467
SSDEEP 6144:pWguCR+LCgOy9jeL0h8Y/NnJxdZFWSiR1e6q+w:pWtE+WgOyj448+NHdbWSi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

30159

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetConsoleAliasesW ReadFile CreateFileW SystemTimeToFileTime FindActCtxSectionStringW GetCommModemStatus GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointA CreateDirectoryExA LocalSize GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryW ContinueDebugEvent LCMapStringA GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedExchangeAdd ReadConsoleOutputCharacterA CreateMutexW GetConsoleTitleW SearchPathA ExpandEnvironmentStringsA FindResourceW FormatMessageA GetModuleHandleA EndUpdateResourceA GetLastError SetCommMask GlobalReAlloc TerminateThread LocalFlags GetConsoleAliasesLengthA GetVolumePathNameA SetVolumeMountPointW ChangeTimerQueueTimer GetLocaleInfoW GetComputerNameA lstrcpynW SetConsoleTextAttribute CopyFileW DosDateTimeToFileTime QueryDosDeviceA CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW AddRefActCtx FoldStringW WritePrivateProfileStringA GetUserDefaultLangID GetConsoleDisplayMode WaitForSingleObject GetLongPathNameW InterlockedCompareExchange EnumTimeFormatsA VerifyVersionInfoW FindNextFileW GetConsoleAliasW SetLastError FreeLibrary CreateFileA SetStdHandle TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapAlloc HeapFree DeleteFileA GetStartupInfoW GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer

user32

GetMessageTime

msimg32

AlphaBlend

Sharing