f6dfe8a78bc6651d4fa2153063656ffb[.]exe

General

Target
f6dfe8a78bc6651d4fa2153063656ffb.exe
Size 143KB
Sample230228-ksrbmaae56
SHA256 b6f475e67a133bbd6806456ddedbc24f3588c4dea8d64df5058d8ccf37358ba9
MD5 f6dfe8a78bc6651d4fa2153063656ffb
SHA1 6ee2540667535ce4d2735a795ebb191c1261b874
SHA512 35259f006caffeaecf7e34a7da3d0cfd8474b5a6bb06f40b73d0faa4fb6c18072fe4894f654cc20e72624042d80f67f777f1dfbcbd1edeb601e063fa2fa8ddfc
SSDEEP 3072:NELKOTCJeuGsIdhn9I+Xm2I+nSvLbTPxe9kZPGv:qHTCwuGVnn9IpekbTPs9kK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

f6dfe8a78bc6651d4fa2153063656ffb.exe

.exe 143KB

f6dfe8a78bc6651d4fa2153063656ffb.exe

IMPHASH c702649e211ff4e9af2e81908e0fc8b8
SHA256 b6f475e67a133bbd6806456ddedbc24f3588c4dea8d64df5058d8ccf37358ba9
MD5 f6dfe8a78bc6651d4fa2153063656ffb
SHA1 6ee2540667535ce4d2735a795ebb191c1261b874
SHA512 35259f006caffeaecf7e34a7da3d0cfd8474b5a6bb06f40b73d0faa4fb6c18072fe4894f654cc20e72624042d80f67f777f1dfbcbd1edeb601e063fa2fa8ddfc
SSDEEP 3072:NELKOTCJeuGsIdhn9I+Xm2I+nSvLbTPxe9kZPGv:qHTCwuGVnn9IpekbTPs9kK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24412

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA WriteConsoleInputA GetWindowsDirectoryW FindFirstVolumeMountPointW FindFirstChangeNotificationW WaitForMultipleObjects ReadConsoleInputA VerifyVersionInfoW GetCPInfoExA OpenEventA SetLocaleInfoW GetProcAddress LocalAlloc DeleteFileA EnumResourceTypesW GetLongPathNameW LoadLibraryW GetBinaryTypeW SetLastError LocalShrink WriteProfileStringW GetComputerNameExA GetConsoleAliasA WriteProfileSectionA GetSystemPowerStatus SetVolumeMountPointA GetModuleHandleW EnumResourceLanguagesA SetDefaultCommConfigA EnumDateFormatsW AddRefActCtx SetVolumeMountPointW GetStartupInfoA CreateJobSet WritePrivateProfileStringW GetStringTypeW GetShortPathNameW FindNextFileW EnumCalendarInfoA ReleaseActCtx GetLastError HeapSize WriteConsoleW RaiseException MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer EnterCriticalSection LeaveCriticalSection CloseHandle HeapCreate HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind CreateFileW

user32

LoadMenuW

shell32

FindExecutableA

Sharing