4f19c141837bf05b918102b1b3c5936d[.]exe

General

Target
4f19c141837bf05b918102b1b3c5936d.exe
Size 220KB
Sample220628-mevs1aaef4
SHA256 47e8486b442ed1eec8df2e0fb2e9d41da8d7097f62edf1f67e1294e084195b30
MD5 4f19c141837bf05b918102b1b3c5936d
SHA1 ba1569a053d8e26da26eaf32ac6f294f9d884ba3
SHA512 787c0c82a4d1fad8b08c51da9071f9081125ff5ea6d4ce8568aba3a1edffa5e18b5e90bb9ed8fdfb358071211b69e473a57b49fcde25df272bd9960494be0e64
SSDEEP 3072:MmYgkFkHU+8zpX0V3b3WZLKP2BhdNuikKLSrckBxORnE4ID2sxkgaBChcpZa9uDS:4NzKKZKeRt+rckBxQExfigafwVf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4f19c141837bf05b918102b1b3c5936d.exe

.exe 220KB

4f19c141837bf05b918102b1b3c5936d.exe

IMPHASH 1f39d87084380c87bb0680c9bdba7a21
SHA256 47e8486b442ed1eec8df2e0fb2e9d41da8d7097f62edf1f67e1294e084195b30
MD5 4f19c141837bf05b918102b1b3c5936d
SHA1 ba1569a053d8e26da26eaf32ac6f294f9d884ba3
SHA512 787c0c82a4d1fad8b08c51da9071f9081125ff5ea6d4ce8568aba3a1edffa5e18b5e90bb9ed8fdfb358071211b69e473a57b49fcde25df272bd9960494be0e64
SSDEEP 3072:MmYgkFkHU+8zpX0V3b3WZLKP2BhdNuikKLSrckBxORnE4ID2sxkgaBChcpZa9uDS:4NzKKZKeRt+rckBxQExfigafwVf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

81016

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetLocaleInfoA InterlockedIncrement _lwrite SetCommTimeouts GetSystemDirectoryA CreateEventW WriteConsoleW VerifyVersionInfoW WaitNamedPipeW BuildCommDCBW AddConsoleAliasW GetPrivateProfileSectionW LoadLibraryA FindResourceExA DeleteTimerQueue GetFirmwareEnvironmentVariableW GetModuleFileNameW BeginUpdateResourceA GetConsoleAliasExesLengthW EnumTimeFormatsW CopyFileA ReadConsoleOutputCharacterW GetConsoleAliasesLengthA UnhandledExceptionFilter GetProcAddress GetUserDefaultLangID GetSystemWindowsDirectoryW FindFirstChangeNotificationW EndUpdateResourceW WritePrivateProfileStringA EnumResourceNamesA LocalReAlloc AreFileApisANSI GetCurrentDirectoryA GetConsoleAliasesLengthW GetAtomNameA SetFileAttributesW SetConsoleTitleW VerSetConditionMask GetCurrentProcess GetProcessWorkingSetSize GetLongPathNameA GetThreadLocale GetSystemDefaultLCID GetCurrentProcessId GetLastError FindFirstFileExA BuildCommDCBAndTimeoutsA OpenJobObjectA EnterCriticalSection EnumCalendarInfoExW SetConsoleMode GetDiskFreeSpaceA GetConsoleAliasExesA GlobalMemoryStatus WriteConsoleOutputCharacterA EnumSystemLocalesA SetLastError CreateFileW LocalAlloc LoadLibraryW GetStringTypeW HeapReAlloc HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess SetFilePointer HeapAlloc HeapCreate ReadFile WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle GetModuleHandleW ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW HeapSize

user32

ClientToScreen

gdi32

GetTextExtentExPointW

winhttp

WinHttpCloseHandle

Name

.text

Size

122KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zucime

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gomez

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gajesu

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sofid

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4f19c141837bf05b918102b1b3c5936d.exe

kernel32

user32

gdi32

winhttp