4a50407aa5853e81c080bb645275d056[.]exe

General

Target
4a50407aa5853e81c080bb645275d056.exe
Size 386KB
Sample220723-tegppsfedm
SHA256 f8e0071b5a217e2caf3193ff532db9cdff04a9bb61090518204d46e05f8d3ec3
MD5 4a50407aa5853e81c080bb645275d056
SHA1 da95b3398334929fbe7823386fdf5e8eddc3a485
SHA512 f587ad89a7d3e1e4834dbe36364bd0be29d9d9b3ba2ba05fa6359ce0d1d7add860f6eefa1f425f547346b907c85e5f8f31a426dac6fd5dc9874ba6068893193d
SSDEEP 6144:XmuzKePuOXWsmZ/bT3yRkumDsuAcO0v+8ZH3QtQDbjRr9oDrx:W1eGiWswjT39ZsuO0v+8dQtQdr9oR
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4a50407aa5853e81c080bb645275d056.exe

.exe 386KB

4a50407aa5853e81c080bb645275d056.exe

IMPHASH 69bb0e5c230d96929eef75f6144d2cd7
SHA256 f8e0071b5a217e2caf3193ff532db9cdff04a9bb61090518204d46e05f8d3ec3
MD5 4a50407aa5853e81c080bb645275d056
SHA1 da95b3398334929fbe7823386fdf5e8eddc3a485
SHA512 f587ad89a7d3e1e4834dbe36364bd0be29d9d9b3ba2ba05fa6359ce0d1d7add860f6eefa1f425f547346b907c85e5f8f31a426dac6fd5dc9874ba6068893193d
SSDEEP 6144:XmuzKePuOXWsmZ/bT3yRkumDsuAcO0v+8ZH3QtQDbjRr9oDrx:W1eGiWswjT39ZsuO0v+8dQtQdr9oR
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42992

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalSize WriteConsoleInputA EnumDateFormatsA CopyFileExW DnsHostnameToComputerNameA VerifyVersionInfoA FindNextFileW VirtualUnlock LockFile GetProfileSectionW RequestWakeupLatency SetProcessPriorityBoost GlobalGetAtomNameW DeleteFileA FindNextVolumeMountPointA TlsSetValue LoadResource WriteConsoleInputW GetConsoleTitleA GetComputerNameExW OpenEventA CallNamedPipeW GetModuleHandleA GetSystemDirectoryA GetDriveTypeA BuildCommDCBAndTimeoutsW GetProcAddress GetShortPathNameA ReleaseActCtx GetCommandLineW InterlockedIncrement GetConsoleTitleW CopyFileW CreateActCtxW FormatMessageA EnterCriticalSection FindNextVolumeA GetThreadSelectorEntry LoadLibraryA CreateNamedPipeA GetSystemDefaultLCID GetConsoleAliasesLengthW WriteProfileSectionA AddAtomW InterlockedDecrement HeapFree _hread InterlockedExchangeAdd GetStartupInfoA CreateMailslotA GetCPInfoExA GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntA GetConsoleAliasExesLengthW WaitForDebugEvent EndUpdateResourceA SetLastError ExitThread GetACP lstrcatW GetConsoleAliasA GetDiskFreeSpaceExA DefineDosDeviceW CreateIoCompletionPort EnumResourceLanguagesW GetCPInfoExW SetConsoleTextAttribute SetInformationJobObject WriteConsoleW SetCriticalSectionSpinCount GetComputerNameW EnumSystemLocalesA WritePrivateProfileSectionA WritePrivateProfileStructA GetPrivateProfileSectionNamesW FileTimeToSystemTime GlobalMemoryStatus SetTapeParameters lstrcmpW SetEvent FreeLibrary FindResourceW SetCommState FormatMessageW InterlockedCompareExchange CreateFiber GetConsoleFontSize MoveFileA LocalAlloc SetFileShortNameW lstrcpyA HeapQueryInformation SetCalendarInfoW SetComputerNameW GetConsoleAliasesW EnumDateFormatsExA GetConsoleOutputCP GetStdHandle GetLocalTime GetStringTypeA FindActCtxSectionStringA FreeEnvironmentStringsA GetModuleHandleExW LoadLibraryW GetBinaryTypeA GetFileAttributesA GetSystemWindowsDirectoryW LocalFlags GetSystemTimeAdjustment SetProcessShutdownParameters lstrcpynA GlobalWire FillConsoleOutputCharacterA GetCompressedFileSizeA GetFullPathNameA ReadConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterA OpenJobObjectA CreateFileW DeleteTimerQueueTimer SetCurrentDirectoryW GetNamedPipeHandleStateA TerminateProcess GetNamedPipeHandleStateW CreateFileA WideCharToMultiByte RaiseException GetCommandLineA HeapValidate IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetFilePointer QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleA CloseHandle

user32

LoadMenuW CharUpperW GetMenuInfo

gdi32

SelectObject

msimg32

AlphaBlend

Name

.text

Size

198KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

137KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boropir

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jimomo

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gobayi

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4a50407aa5853e81c080bb645275d056.exe

kernel32

user32

gdi32

msimg32