5007544c0757ac19cefd29d0d916e8f9[.]exe

General

Target
5007544c0757ac19cefd29d0d916e8f9.exe
Size 367KB
Sample220514-zve4pseafn
SHA256 e0f3a387b95a42ad14cdf057043405a8fb3e4645a1fb3e6dd6211bdb0c53ff8a
MD5 5007544c0757ac19cefd29d0d916e8f9
SHA1 948420edeccb20d269a56fa24003c8c59db61e0a
SHA512 6c1954564f7da4962c1cc3827eeaa8f700b7c7573060420b47ebee866d9b70e08dd857b2d1e2776bc54b3fa64458c78e3836911464b56393b5db9bca79b57d83
SSDEEP 6144:9JcNccTWn5Mf0+nPXUdsb7kdJGC8fJz3St:9+NccTWnuc+PXUCMLBizC
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5007544c0757ac19cefd29d0d916e8f9.exe

.exe 367KB

5007544c0757ac19cefd29d0d916e8f9.exe

IMPHASH 0226362c44ee52f8cb9cb585e58c69f6
SHA256 e0f3a387b95a42ad14cdf057043405a8fb3e4645a1fb3e6dd6211bdb0c53ff8a
MD5 5007544c0757ac19cefd29d0d916e8f9
SHA1 948420edeccb20d269a56fa24003c8c59db61e0a
SHA512 6c1954564f7da4962c1cc3827eeaa8f700b7c7573060420b47ebee866d9b70e08dd857b2d1e2776bc54b3fa64458c78e3836911464b56393b5db9bca79b57d83
SSDEEP 6144:9JcNccTWn5Mf0+nPXUdsb7kdJGC8fJz3St:9+NccTWnuc+PXUCMLBizC
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

24319

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExA FreeLibrary InterlockedIncrement OpenJobObjectA GetCurrentProcess EnumCalendarInfoExW GetConsoleAliasesLengthA GetGeoInfoW GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc SetConsoleMode GetAtomNameW GetModuleFileNameW GetSystemDirectoryA GetBinaryTypeW FindResourceA LCMapStringA GetLastError GetProcAddress GetDiskFreeSpaceW LoadLibraryA LocalAlloc CreateEventW GetCommTimeouts GetCurrentProcessId lstrcmpW SetDefaultCommConfigA GetCommandLineA HeapSetInformation GetStartupInfoW DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetFilePointer GetModuleHandleW ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree Sleep RtlUnwind WriteConsoleW MultiByteToWideChar SetStdHandle FlushFileBuffers LoadLibraryW LCMapStringW GetStringTypeW HeapAlloc HeapReAlloc RaiseException CreateFileW CloseHandle HeapSize

advapi32

ImpersonateAnonymousToken

Name

.text

Size

274KB

Virtual Size

274KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

646KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vej

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gayo

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rewajiy

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5007544c0757ac19cefd29d0d916e8f9.exe

kernel32

advapi32