bd434864980824e06ced11bf2469e67a[.]exe

General

Target
bd434864980824e06ced11bf2469e67a.exe
Size 315KB
Sample230403-pt3s9sef85
SHA256 a4b6a1619cf4ff65770be120cc415de1e8897c2378610171f3c48ff0fa38e9fe
MD5 bd434864980824e06ced11bf2469e67a
SHA1 7c37c4781fa6d44a4fc35a4d3cc78a35a13d8675
SHA512 c9526efd0ae458ec7589a62c6cd178d3df8c56d06c146716f5323237d53b427b7d908262772753203bd34d13ea8fc39e8b33e1024fdbefda18ee12efd440058d
SSDEEP 6144:ytp8XmnOMKz/+72bPefDqZuzsT43wE/6V6TIZtkjt:IyX8OMUxG+uz9gE/6cIGt
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bd434864980824e06ced11bf2469e67a.exe

.exe 315KB

bd434864980824e06ced11bf2469e67a.exe

IMPHASH c8e27fc56217a3e872533a4d04f73544
SHA256 a4b6a1619cf4ff65770be120cc415de1e8897c2378610171f3c48ff0fa38e9fe
MD5 bd434864980824e06ced11bf2469e67a
SHA1 7c37c4781fa6d44a4fc35a4d3cc78a35a13d8675
SHA512 c9526efd0ae458ec7589a62c6cd178d3df8c56d06c146716f5323237d53b427b7d908262772753203bd34d13ea8fc39e8b33e1024fdbefda18ee12efd440058d
SSDEEP 6144:ytp8XmnOMKz/+72bPefDqZuzsT43wE/6V6TIZtkjt:IyX8OMUxG+uz9gE/6cIGt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15844

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA WriteConsoleInputW CopyFileExW GetStringTypeA SetLocalTime CallNamedPipeA EnumCalendarInfoW GetEnvironmentStringsW GetModuleHandleExW InterlockedCompareExchange WriteConsoleInputA GetCommProperties BackupSeek SetFileTime GetWindowsDirectoryA WaitNamedPipeW GetDateFormatA GetDriveTypeA GetSystemDirectoryW LoadLibraryW ReadFileScatter GetFileAttributesA DnsHostnameToComputerNameW GetComputerNameExA GetConsoleAliasW GetTapePosition lstrcmpW CreateMutexW GetConsoleOutputCP GetProcAddress RemoveDirectoryA ResetEvent LoadLibraryA OpenMutexA LocalAlloc GetFileType BuildCommDCBAndTimeoutsW AddAtomA GlobalFindAtomW EnumResourceTypesW GetModuleFileNameA FindNextFileA FindFirstVolumeMountPointA GetModuleHandleA ContinueDebugEvent RequestWakeupLatency GetCurrentThreadId SetCalendarInfoA GetVersionExA DeleteFileW FindActCtxSectionStringW FindNextVolumeA EnumSystemLocalesA GetLocaleInfoA DeactivateActCtx CreateTimerQueue GetLastError HeapFree DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW HeapCreate HeapDestroy EnterCriticalSection LeaveCriticalSection DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep FatalAppExitA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapAlloc HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID IsValidLocale

user32

GetMenu

advapi32

ReportEventW

Sharing