4942206a73a0d4103c2374bfd61b5dd3[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
4942206a73a0d4103c2374bfd61b5dd3.exe
Size 559KB
Sample220219-tfnjmsbeem
SHA256 e0c53ca40fa7065b0c76b01eacd256efcd8ada5e4c4cde3664dc95eadeafaafa
MD5 4942206a73a0d4103c2374bfd61b5dd3
SHA1 0e3025bf27de79f39278aa3e0529d70288fb793a
SHA512 77bcf95d2852bb8901f1ebc2a935fd70b06ff9517a2efee20c5350f4b61c8b04c0d18b690eb14ec8606f8c887b83488faf7d09f8a43820f49c9de7cac6e8cdaa
SSDEEP 12288:MLbbjMnuD6jihD5z29NQKHH8UPaIul08U6AOWXH:M/+a0S5C/QKnri7l0xX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4942206a73a0d4103c2374bfd61b5dd3.exe

.exe 559KB

4942206a73a0d4103c2374bfd61b5dd3.exe

IMPHASH 2a29a17c115ba1ac6712c8e06f7e1da2
SHA256 e0c53ca40fa7065b0c76b01eacd256efcd8ada5e4c4cde3664dc95eadeafaafa
MD5 4942206a73a0d4103c2374bfd61b5dd3
SHA1 0e3025bf27de79f39278aa3e0529d70288fb793a
SHA512 77bcf95d2852bb8901f1ebc2a935fd70b06ff9517a2efee20c5350f4b61c8b04c0d18b690eb14ec8606f8c887b83488faf7d09f8a43820f49c9de7cac6e8cdaa
SSDEEP 12288:MLbbjMnuD6jihD5z29NQKHH8UPaIul08U6AOWXH:M/+a0S5C/QKnri7l0xX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23291

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitNamedPipeA GetUserDefaultLCID SetVolumeMountPointW GetComputerNameW GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW SetFileTime CreateActCtxW InitializeCriticalSection GlobalAlloc LoadLibraryW GetLocaleInfoW GetVersionExW HeapValidate GetAtomNameW GetMailslotInfo SetConsoleTitleA RaiseException LCMapStringA VerifyVersionInfoW GetStdHandle GetProcAddress GetLongPathNameA InterlockedDecrement GetThreadContext CopyFileA EnterCriticalSection GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA GetFileType GetDefaultCommConfigA LoadLibraryExA CreateMutexA CreateMailslotA GetStringTypeW GetConsoleTitleW GetFileTime SetCalendarInfoA LocalFree EnumSystemLocalesW SwitchToThread VirtualAlloc MoveFileExA GetVolumeNameForVolumeMountPointA PeekConsoleInputW CreateFileA WriteConsoleW WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind LCMapStringW GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount SetFilePointer CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetConsoleOutputCP

user32

WindowFromPoint

gdi32

GetCharWidthFloatA

advapi32

ClearEventLogW

winhttp

WinHttpCloseHandle