4ef3aadead266f8f2c978813723928c8[.]exe

General

Target
4ef3aadead266f8f2c978813723928c8.exe
Size 710KB
Sample220203-j2rhbaefb4
SHA256 f158128e478896a5522d97a2b1490fa30246b0a2eac1cdd8b417df8e36cd06f3
MD5 4ef3aadead266f8f2c978813723928c8
SHA1 8c8bf3ba919dd8eea2adc0a8811689c1025355dc
SHA512 f208f2b515923dfd34271daeb9cbcd926b50518d1476926705ff8eea85b2e1b89e2602542349729693df3ba22e7108d244ee2a6efe0c9e28a08f151ab638e2b5
SSDEEP 12288:+ibtzPNSSmEq8ySwmsgcAvHisjxcQ6ZIEablteikENJ/ThsM88CzKaa1IRpb0OJ:+MfU8ncAKsjEjabltei3/TOV8CzJa1I
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4ef3aadead266f8f2c978813723928c8.exe

.exe 710KB

4ef3aadead266f8f2c978813723928c8.exe

IMPHASH 02b8c0715a2ee9075227bc28cc3779b2
SHA256 f158128e478896a5522d97a2b1490fa30246b0a2eac1cdd8b417df8e36cd06f3
MD5 4ef3aadead266f8f2c978813723928c8
SHA1 8c8bf3ba919dd8eea2adc0a8811689c1025355dc
SHA512 f208f2b515923dfd34271daeb9cbcd926b50518d1476926705ff8eea85b2e1b89e2602542349729693df3ba22e7108d244ee2a6efe0c9e28a08f151ab638e2b5
SSDEEP 12288:+ibtzPNSSmEq8ySwmsgcAvHisjxcQ6ZIEablteikENJ/ThsM88CzKaa1IRpb0OJ:+MfU8ncAKsjEjabltei3/TOV8CzJa1I
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56128

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigA FindFirstFileExA GetDriveTypeW FreeEnvironmentStringsW SetProcessPriorityBoost FindNextVolumeA SetCurrentDirectoryA GetLongPathNameA TlsSetValue SetComputerNameExA FindAtomW BuildCommDCBAndTimeoutsA VirtualProtect GetModuleHandleA GlobalAlloc InitializeCriticalSection TlsGetValue GetCommandLineW InterlockedDecrement GetCalendarInfoA CopyFileA OutputDebugStringW SetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringW GetProcessHeaps GlobalWire HeapCompact GetStartupInfoA GetDiskFreeSpaceExA GetCPInfoExA GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError WriteProfileSectionW GetCalendarInfoW GetProfileStringA SetConsoleCursorPosition GetLastError DeleteVolumeMountPointW ContinueDebugEvent WriteFile GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW GlobalFindAtomA FindNextChangeNotification CreateActCtxA GetMailslotInfo GetPrivateProfileIntA _lread DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceA WriteConsoleW GetPrivateProfileSectionA WritePrivateProfileSectionA GetPrivateProfileStructA TryEnterCriticalSection GetPrivateProfileSectionNamesW GetFileAttributesExW LocalFileTimeToFileTime MoveFileW GetVolumePathNameA TerminateProcess lstrcmpW GetComputerNameA FindActCtxSectionStringA GetThreadContext MoveFileExA GetProcAddress GlobalCompact UnregisterWait BuildCommDCBW GlobalDeleteAtom GetShortPathNameW OpenEventA SetCommTimeouts WaitNamedPipeW CreateIoCompletionPort GetPrivateProfileSectionNamesA FindResourceExW GetSystemTimeAsFileTime GetSystemInfo FreeEnvironmentStringsA GetLocalTime OpenSemaphoreA WriteProfileStringA SetFileShortNameW lstrcpyW VerLanguageNameW GetThreadSelectorEntry GetSystemTime UnlockFile GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize GetAtomNameA WriteConsoleInputW CreateMailslotA SetCommState SetHandleCount _lopen ResetWriteWatch ClearCommBreak GetModuleHandleW GetOverlappedResult EnumDateFormatsA GetConsoleAliasExesLengthW WriteConsoleOutputCharacterA HeapFree OpenMutexW GetStringTypeW SetFilePointer PostQueuedCompletionStatus AreFileApisANSI OpenWaitableTimerW GetCurrentProcess PeekNamedPipe GetCompressedFileSizeW FindNextVolumeMountPointA GetFullPathNameA WriteProfileStringW InitAtomTable GlobalAddAtomW TerminateJobObject SetFirmwareEnvironmentVariableA GetBinaryTypeW LeaveCriticalSection QueryDosDeviceW HeapSetInformation CreateNamedPipeA InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind MoveFileA GetCommandLineA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW IsDebuggerPresent TlsAlloc GetCurrentThreadId TlsFree CloseHandle GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess GetStdHandle GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc FlushFileBuffers GetConsoleMode DebugBreak OutputDebugStringA LoadLibraryW InitializeCriticalSectionAndSpinCount SetStdHandle MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA WriteConsoleA CreateFileA

user32

OemToCharA

advapi32

GetFileSecurityW

msimg32

AlphaBlend

Sharing