06b0a5bee593079754ec299aa900b9b3[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
06b0a5bee593079754ec299aa900b9b3.exe
Size 3.1MB
Sample230312-19mmrsff49
SHA256 626da43e5e9f4209332a9f0f7ad3680084e5aa481c71bc1ff6d299ac77fb0d75
MD5 06b0a5bee593079754ec299aa900b9b3
SHA1 942bb557466e2fc08b478fee97d14ab2756591bc
SHA512 04ab027c2c4b31ae3fc699ce3a8f7f08aa54bcedd0198c2471f8afbe320b6e35ecece69cbe9f5e358ff02f1b02758f86965cb0a8592c553848e9cac5a878d207
SSDEEP 49152:TFuEcgU4vR2a8vl2zrbCWLAWrcBGZmeVL0aPrQ3zvX/:3vYl2+WprcBImeN0aPrQ3zv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

06b0a5bee593079754ec299aa900b9b3.exe

.exe 3.1MB

06b0a5bee593079754ec299aa900b9b3.exe

IMPHASH fcdf2e82d7ffd2b0b7147ae3b1f9e151
SHA256 626da43e5e9f4209332a9f0f7ad3680084e5aa481c71bc1ff6d299ac77fb0d75
MD5 06b0a5bee593079754ec299aa900b9b3
SHA1 942bb557466e2fc08b478fee97d14ab2756591bc
SHA512 04ab027c2c4b31ae3fc699ce3a8f7f08aa54bcedd0198c2471f8afbe320b6e35ecece69cbe9f5e358ff02f1b02758f86965cb0a8592c553848e9cac5a878d207
SSDEEP 49152:TFuEcgU4vR2a8vl2zrbCWLAWrcBGZmeVL0aPrQ3zvX/:3vYl2+WprcBImeN0aPrQ3zv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

450320

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_AGGRESIVE_WS_TRIM IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _except_handler3

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetPriorityClass CopyFileW CreateDirectoryW CreateEventW CreateFileA CreateFileW CreateProcessW CreateThread DeleteCriticalSection DeleteFileW DeviceIoControl DuplicateHandle EnumResourceLanguagesW ExitThread ExpandEnvironmentStringsW FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FindResourceW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeResource GetCommandLineW GetConsoleCP GetConsoleMode GetConsoleOutputCP GetCurrentThread GetDiskFreeSpaceExW GetDriveTypeW GetEnvironmentStringsW GetFileAttributesW GetFileInformationByHandle GetFileTime GetFileType GetFullPathNameW GetLastError GetLocaleInfoA GetLocaleInfoW GetLogicalDrives GetLogicalDriveStringsW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOEMCP GetPrivateProfileIntW GetPrivateProfileStringW GetProcAddress GetProcessHeap GetStartupInfoA IsValidCodePage GetStdHandle GetStringTypeA GetStringTypeW GetTempFileNameW GetTempPathW GetTimeZoneInformation GetVersionExA GetVersionExW GetVolumeInformationW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFlags GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapCreate HeapFree HeapReAlloc HeapSize InterlockedDecrement InterlockedExchange InterlockedIncrement LCMapStringA LCMapStringW LoadLibraryW LoadResource LocalAlloc LocalFree LocalReAlloc LockFile LockResource lstrcmpA lstrcmpW lstrlenA lstrlenW MulDiv MultiByteToWideChar OpenProcess RaiseException ReadFile RemoveDirectoryW ResumeThread SetConsoleTitleW SetEndOfFile SetEnvironmentVariableA SetErrorMode SetEvent SetFileAttributesW SetFilePointer SetHandleCount SetLastError SetStdHandle SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue UnhandledExceptionFilter UnlockFile VirtualAlloc VirtualFree WaitForSingleObject WideCharToMultiByte WriteConsoleA WriteConsoleW WriteFile WritePrivateProfileStringW GetCPInfo Process32FirstW Process32NextW GetCommandLineA InitializeCriticalSection EnterCriticalSection GetTickCount ExitProcess LeaveCriticalSection LoadLibraryA GetStartupInfoW CreateToolhelp32Snapshot

user32

GetCursorPos GetDC GetDesktopWindow GetDlgCtrlID GetDlgItem GetFocus GetForegroundWindow GetKeyState GetLastActivePopup GetMenu GetMenuCheckMarkDimensions GetMenuItemCount GetMenuItemID GetMenuState GetMessagePos GetMessageTime GetMessageW GetNextDlgTabItem GetParent GetPropW GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId GrayStringW InvalidateRect IsDialogMessageW IsIconic IsWindowEnabled IsWindowVisible IsZoomed LoadBitmapW LoadCursorW LoadIconW GetClientRect MapWindowPoints MessageBoxW ModifyMenuW MoveWindow PeekMessageW PostMessageW PostQuitMessage PtInRect RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendDlgItemMessageA SendDlgItemMessageW SendMessageW SetActiveWindow SetCursor SetDlgItemTextW SetFocus SetForegroundWindow SetMenu SetMenuItemBitmaps SetPropW SetWindowLongW SetWindowPos SetWindowRgn SetWindowsHookExW SetWindowTextW ShowWindow SystemParametersInfoA TabbedTextOutW TrackPopupMenu TranslateMessage UnhookWindowsHookEx UnregisterClassW UpdateWindow ValidateRect WindowFromPoint WinHelpW GetClassNameW GetClassLongW GetClassInfoW GetClassInfoExW GetCapture LoadStringW GetWindowDC CallWindowProcW CharToOemW FillRect ExitWindowsEx EndDialog EnableWindow EnableMenuItem DrawTextW DrawTextExW DrawMenuBar DrawIcon DrawFocusRect DrawEdge DispatchMessageW DestroyWindow DestroyMenu DefWindowProcW CreateWindowExW CreatePopupMenu CreateDialogIndirectParamW CopyRect ClientToScreen CheckMenuItem CharUpperW GetActiveWindow

winspool.drv

WaitForPrinterChange XcvDataW WritePrinter StartPagePrinter StartDocPrinterW StartDocPrinterA SetPrinterW SetPrinterA

advapi32

RegCloseKey DeleteService EnumDependentServicesW GetTokenInformation InitializeSecurityDescriptor LookupPrivilegeValueW OpenProcessToken OpenSCManagerW OpenServiceW RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumKeyW StartServiceW SetSecurityDescriptorOwner SetSecurityDescriptorGroup RegOpenKeyW RegQueryInfoKeyW RegQueryValueExW RegQueryValueW RegSetValueExW SetFileSecurityW SetSecurityDescriptorDacl RegEnumValueW RegOpenKeyExW

shell32

StrStrW

shlwapi

PathMatchSpecW PathRemoveFileSpecW PathStripToRootW SHDeleteKeyW

Name

.text

Size

440KB

Virtual Size

436KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

14.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

34B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

288KB

Virtual Size

288KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fiq39

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE