420b97aaf69a591053681a00f7f66d1f[.]exe

General

Target
420b97aaf69a591053681a00f7f66d1f.exe
Size 393KB
Sample220429-qhsplafbgp
SHA256 b2e7a49f0cd72b9f86667885c622adf4b34499a2bc7a3c9d3be355575465cf6a
MD5 420b97aaf69a591053681a00f7f66d1f
SHA1 51228aaf001b4f3ff6b5117909fd5515d193cee3
SHA512 999beb2c8977ae3cbf285cb58ace5717763f9e2e3ca8aac73aceaf47382ec8d44f82727652136e6c7075479030a2cb4c3af08fd91bcc2cbde575b860a11fc794
SSDEEP 6144:0kjSmpLSotCvjlHRQr0cUL5BFoWTfqyOgtU8i2:0kjtLScsjVRQrM5TtfqmNL
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

420b97aaf69a591053681a00f7f66d1f.exe

.exe 393KB

420b97aaf69a591053681a00f7f66d1f.exe

IMPHASH 7fe8d05c64ac9bd6bd1b581e730649cf
SHA256 b2e7a49f0cd72b9f86667885c622adf4b34499a2bc7a3c9d3be355575465cf6a
MD5 420b97aaf69a591053681a00f7f66d1f
SHA1 51228aaf001b4f3ff6b5117909fd5515d193cee3
SHA512 999beb2c8977ae3cbf285cb58ace5717763f9e2e3ca8aac73aceaf47382ec8d44f82727652136e6c7075479030a2cb4c3af08fd91bcc2cbde575b860a11fc794
SSDEEP 6144:0kjSmpLSotCvjlHRQr0cUL5BFoWTfqyOgtU8i2:0kjtLScsjVRQrM5TtfqmNL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

53472

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextVolumeW EnterCriticalSection GetNamedPipeHandleStateW GetQueuedCompletionStatus FillConsoleOutputCharacterA SetThreadAffinityMask TerminateProcess GetCurrentProcessId GetVersionExA EnumDateFormatsExA EnumResourceNamesA FindNextFileW CopyFileExW BuildCommDCBAndTimeoutsW DebugSetProcessKillOnExit WritePrivateProfileStructA MapViewOfFileEx CreateTimerQueue ReadConsoleInputA GetSystemDirectoryA GetDriveTypeA LoadLibraryA GlobalAlloc VerifyVersionInfoW GetBinaryTypeA InterlockedExchange FindFirstChangeNotificationA FormatMessageW SetDllDirectoryW GetNamedPipeHandleStateA WritePrivateProfileStringA GetConsoleAliasesLengthW GetProcessHeap OpenWaitableTimerW UnlockFile InterlockedIncrement GetStartupInfoA GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesW ContinueDebugEvent EndUpdateResourceA GetLastError GetSystemTime OpenFileMappingA GetConsoleAliasExesLengthW lstrcmpW SetConsoleActiveScreenBuffer SetDefaultCommConfigW VirtualFree InterlockedExchangeAdd GlobalUnfix GetSystemWindowsDirectoryA CopyFileW GetOEMCP FindAtomA HeapUnlock SetMailslotInfo CreateActCtxA _lread CreateIoCompletionPort CreateNamedPipeA SetSystemTimeAdjustment DefineDosDeviceW GetAtomNameW SetConsoleScreenBufferSize EnumResourceTypesW lstrlenA LoadLibraryW WriteConsoleW VirtualProtect lstrcpyA GetModuleHandleA ReadConsoleOutputW GetThreadContext BuildCommDCBA AddRefActCtx GetStringTypeA WritePrivateProfileStringW GetFileAttributesW GetVolumePathNameA MoveFileW GetCommMask SetFileShortNameA LockFile QueryActCtxW GetNamedPipeInfo FreeConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasesW WriteConsoleInputW CreateMailslotA SystemTimeToTzSpecificLocalTime SetLocalTime EnumSystemLocalesA CallNamedPipeW GetConsoleAliasExesLengthA FindActCtxSectionStringA CopyFileExA ResetWriteWatch GetPrivateProfileIntW GetModuleHandleExA GetStringTypeExA GetTickCount GetConsoleAliasesLengthA GlobalWire FillConsoleOutputCharacterW GetCompressedFileSizeA SetThreadPriority FreeUserPhysicalPages WriteConsoleOutputCharacterA EnumDateFormatsW TerminateJobObject CreateFileW GetDateFormatW BuildCommDCBAndTimeoutsA GetBinaryTypeW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetStartupInfoW HeapValidate IsBadReadPtr GetProcAddress TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree DebugBreak GetStdHandle WriteFile OutputDebugStringA GetFileType OutputDebugStringW ExitProcess QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount HeapDestroy HeapCreate HeapFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA

Sharing