bd6da92bd52d003123cbc4759dec1002[.]exe

General

Target
bd6da92bd52d003123cbc4759dec1002.exe
Size 273KB
Sample230302-nmrlzscf86
SHA256 bf1da988e71f4e6b5aa9ad169d1637ac47ac43b548fdb1173733922d620572c5
MD5 bd6da92bd52d003123cbc4759dec1002
SHA1 9dafebf9cfdc15cd54c56b767b07b0d7944d1f92
SHA512 9c7867046c173643f150a322a95f830c0a04c2bc50b72925ffb87dbf11188d54d3152d855e6741e3b107f0c92dc9e037e421d531ad2921226fe0b71042ede302
SSDEEP 6144:BqgzUOOHyHYY9CU3v/fQ1Buu48mVUKfm8XZdpqRI:BqgzyyHYY9CU3v/EBuu48iUQXAK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bd6da92bd52d003123cbc4759dec1002.exe

.exe 273KB

bd6da92bd52d003123cbc4759dec1002.exe

IMPHASH 4054b693d3c05398378812172a4ea0e8
SHA256 bf1da988e71f4e6b5aa9ad169d1637ac47ac43b548fdb1173733922d620572c5
MD5 bd6da92bd52d003123cbc4759dec1002
SHA1 9dafebf9cfdc15cd54c56b767b07b0d7944d1f92
SHA512 9c7867046c173643f150a322a95f830c0a04c2bc50b72925ffb87dbf11188d54d3152d855e6741e3b107f0c92dc9e037e421d531ad2921226fe0b71042ede302
SSDEEP 6144:BqgzUOOHyHYY9CU3v/fQ1Buu48mVUKfm8XZdpqRI:BqgzyyHYY9CU3v/EBuu48iUQXAK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReleaseMutex ReadConsoleInputW VerifyVersionInfoW GetCPInfoExW CreateEventW SetLocaleInfoA GetProcAddress GlobalAlloc DeleteFileA EnumResourceTypesW GetBinaryTypeA SetLastError LocalFlags WriteProfileStringW GetComputerNameExA GetConsoleAliasA WriteProfileSectionW SetSystemPowerState FindFirstVolumeMountPointW GetModuleHandleW EnumResourceLanguagesA SetDefaultCommConfigW EnumTimeFormatsA GetCurrentActCtx DeleteVolumeMountPointW GetStartupInfoW IsProcessInJob WritePrivateProfileStringA FoldStringA GetShortPathNameA FindNextFileA EnumCalendarInfoW LocalAlloc CreateEventA GetLastError RtlCaptureContext GetStringTypeExA GetWindowsDirectoryA SetVolumeMountPointA LoadLibraryA DecodePointer EncodePointer GetCommandLineW HeapSetInformation IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapFree Sleep RtlUnwind SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW LCMapStringW MultiByteToWideChar GetStringTypeW HeapAlloc HeapReAlloc WriteConsoleW HeapSize CloseHandle CreateFileW

gdi32

GetBoundsRect

advapi32

GetKernelObjectSecurity

Sharing