b4b640ef6a48d44b1603541a05e45b84[.]exe

General

Target
b4b640ef6a48d44b1603541a05e45b84.exe
Size 544KB
Sample220220-qlm9aabdg4
SHA256 466a22e3f5ef8a653a7bec43434eaa8fa19c7f089ece026352ebdbfcfc4df8a5
MD5 b4b640ef6a48d44b1603541a05e45b84
SHA1 bba166960192a5d4c6a85668c13a46f5f0ad0d48
SHA512 97a34e8b42bce899d18e00025dcb5dcd3f49da3c8e18b5cefdec1518074e3ef38f70f8d0cb10b442de0e7141cff88852aad5e17891324f0290b76051a3171cad
SSDEEP 12288:oXSI12agbDTTsbaQ8P7cVxZGse2+4bi7LfiD7:skVDHXrP7GGsen4v
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b4b640ef6a48d44b1603541a05e45b84.exe

.exe 544KB

b4b640ef6a48d44b1603541a05e45b84.exe

IMPHASH f7a1bb6a2d02ab5f55829d55429fb196
SHA256 466a22e3f5ef8a653a7bec43434eaa8fa19c7f089ece026352ebdbfcfc4df8a5
MD5 b4b640ef6a48d44b1603541a05e45b84
SHA1 bba166960192a5d4c6a85668c13a46f5f0ad0d48
SHA512 97a34e8b42bce899d18e00025dcb5dcd3f49da3c8e18b5cefdec1518074e3ef38f70f8d0cb10b442de0e7141cff88852aad5e17891324f0290b76051a3171cad
SSDEEP 12288:oXSI12agbDTTsbaQ8P7cVxZGse2+4bi7LfiD7:skVDHXrP7GGsen4v
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

23307

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA GetStringTypeA MoveFileExA InterlockedDecrement WaitNamedPipeA SetVolumeMountPointW GetComputerNameW GetConsoleAliasesLengthA ReadConsoleW SetFileTime SetCommTimeouts InitializeCriticalSection SwitchToFiber HeapValidate GetAtomNameW GetMailslotInfo CreateActCtxA CreateMailslotW SetConsoleTitleA VerifyVersionInfoW GetStdHandle GetLongPathNameW GetProcAddress VirtualAlloc CreateMutexW CopyFileA EnterCriticalSection LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc DnsHostnameToComputerNameA GlobalGetAtomNameW GetModuleFileNameA GetDefaultCommConfigA LoadLibraryExA GetConsoleTitleW GetFileTime SetCalendarInfoA GetVersionExA GetVolumeNameForVolumeMountPointW GetFileInformationByHandle LocalFree WriteProcessMemory EnumSystemLocalesW SetFileAttributesW LCMapStringW PeekConsoleInputW GetSystemDefaultLangID WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringA GetStringTypeW GetModuleHandleW ExitProcess WriteFile HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize SetHandleCount GetFileType SetFilePointer CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CreateFileA

gdi32

GetCharWidthFloatA

winhttp

WinHttpCloseHandle

Sharing