32c8b3b5e43f7f5899f1f3c275cbdce1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
32c8b3b5e43f7f5899f1f3c275cbdce1.exe
Size 316KB
Sample230218-ktbbssbf67
SHA256 1354fea783bfe2d72267bb11cd26ddd9850b93ad93592d9b8e48eb072cfdfc68
MD5 32c8b3b5e43f7f5899f1f3c275cbdce1
SHA1 76fbc6dd6393febe80fc382f9de49eb5941dc3bf
SHA512 6e418376e426c2e0978c7061e4c73925fb8725d17250c952b4d5d109ace4922311c4ee382224678aa10a06af6b7d50b718e33a50b90abe8df413673da8bba854
SSDEEP 6144:j74d0qHFE2y1MPE2+XfKZwFMHhJglGgvn+kEhF3DalPcSSOS:34l+1MPKXeYlpn+bDavSF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

32c8b3b5e43f7f5899f1f3c275cbdce1.exe

.exe 316KB

32c8b3b5e43f7f5899f1f3c275cbdce1.exe

IMPHASH 29a62d14d89b432fd6115525abce5c2c
SHA256 1354fea783bfe2d72267bb11cd26ddd9850b93ad93592d9b8e48eb072cfdfc68
MD5 32c8b3b5e43f7f5899f1f3c275cbdce1
SHA1 76fbc6dd6393febe80fc382f9de49eb5941dc3bf
SHA512 6e418376e426c2e0978c7061e4c73925fb8725d17250c952b4d5d109ace4922311c4ee382224678aa10a06af6b7d50b718e33a50b90abe8df413673da8bba854
SSDEEP 6144:j74d0qHFE2y1MPE2+XfKZwFMHhJglGgvn+kEhF3DalPcSSOS:34l+1MPKXeYlpn+bDavSF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

45007

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateFileW FindActCtxSectionGuid WriteConsoleInputW GetWindowsDirectoryA FindFirstVolumeMountPointA FindFirstChangeNotificationA WaitForSingleObject ReadConsoleInputA VerifyVersionInfoW GetVersionExA GetCurrentProcess OpenEventA CreateFileMappingA GetLocaleInfoW GetProcAddress LoadLibraryA GlobalAlloc DeleteTimerQueueTimer GetConsoleTitleA CopyFileA FindResourceA GetBinaryTypeW SetLastError GetProfileSectionW WriteProfileStringW GetConsoleAliasA WritePrivateProfileSectionW SetVolumeMountPointA EnumResourceLanguagesW CommConfigDialogA _hread EnumDateFormatsW ActivateActCtx DeleteVolumeMountPointA WritePrivateProfileStringA GetSystemDirectoryA GetStringTypeA GetLongPathNameA FindNextFileW EnumCalendarInfoA LocalAlloc ReleaseActCtx FindFirstFileA CreateFileA WriteConsoleW LoadLibraryW FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError HeapFree RtlUnwind RaiseException DeleteFileA GetCommandLineW HeapSetInformation GetStartupInfoW WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo HeapAlloc IsProcessorFeaturePresent HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId GetACP GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW HeapReAlloc HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer

user32

GetMenuBarInfo GetMessageTime

shell32

FindExecutableA

ole32

CoGetInstanceFromIStorage

Name

.text

Size

97KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

187KB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.cebuvir

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mis

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yejupe

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mec

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.dodom

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ