3d6386af62248d3b66ed85466b67002e4c72b1a6245bce6b6e94b70684205c8b

General

Target
3d6386af62248d3b66ed85466b67002e4c72b1a6245bce6b6e94b70684205c8b
Size 700KB
Sample230408-ldp1pacf59
SHA256 3d6386af62248d3b66ed85466b67002e4c72b1a6245bce6b6e94b70684205c8b
MD5 f5e92ea6b702f251c3da68c89d6a77a7
SHA1 ad1a991f9a2f4e625797ffc7d39e0c783f362658
SHA512 353b879235f1048e41e90f39fc353d338e4430f319ba3b6949accdb5515115b20f37ddafc4fecce157fe967f0d45c75021edd61fb869358654a45e6493b5fcb5
SSDEEP 12288:dCHHTyTHTZh91A0bX0tlktes9+FjAUHBeH+jjcv0ttkIe4:AneTo0bkogs98DQHdKtl7
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

3d6386af62248d3b66ed85466b67002e4c72b1a6245bce6b6e94b70684205c8b

.exe 700KB

3d6386af62248d3b66ed85466b67002e4c72b1a6245bce6b6e94b70684205c8b

IMPHASH df2226e8fe47f2e29ce1b8002c45b6ea
SHA256 3d6386af62248d3b66ed85466b67002e4c72b1a6245bce6b6e94b70684205c8b
MD5 f5e92ea6b702f251c3da68c89d6a77a7
SHA1 ad1a991f9a2f4e625797ffc7d39e0c783f362658
SHA512 353b879235f1048e41e90f39fc353d338e4430f319ba3b6949accdb5515115b20f37ddafc4fecce157fe967f0d45c75021edd61fb869358654a45e6493b5fcb5
SSDEEP 12288:dCHHTyTHTZh91A0bX0tlktes9+FjAUHBeH+jjcv0ttkIe4:AneTo0bkogs98DQHdKtl7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19607

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA QueryPerformanceCounter GetUserDefaultLCID SetConsoleScreenBufferSize InterlockedCompareExchange AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW ReadConsoleW GlobalAlloc LoadLibraryW CopyFileW GetVersionExW DeleteVolumeMountPointW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetMailslotInfo WritePrivateProfileStringW GetStringTypeExA CreateJobObjectA GetProfileIntA GetCPInfoExW GetCommState InterlockedFlushSList GetProcAddress VirtualAlloc HeapSize BackupWrite SetFirmwareEnvironmentVariableW RemoveDirectoryA SetStdHandle MoveFileA AddAtomW BeginUpdateResourceA WriteProfileSectionW FoldStringA EnumResourceTypesW GetModuleHandleA VirtualProtect OpenEventW GetShortPathNameW GetVersionExA GetWindowsDirectoryW GetConsoleProcessList DebugBreak InterlockedIncrement GetLastError FindResourceW UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar HeapFree GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc RaiseException GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharLowerBuffW

gdi32

GetBrushOrgEx GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

3d6386af62248d3b66ed85466b67002e4c72b1a6245bce6b6e94b70684205c8b

kernel32

user32

gdi32