4987a7297078ad273f19351af8f535e9[.]exe

General

Target
4987a7297078ad273f19351af8f535e9.exe
Size 450KB
Sample220918-tqs7wafdbm
SHA256 12935ca1073fff08eb4fbd5d4cd1707b0fce7dd92a2106cac5af92de0451ffaf
MD5 4987a7297078ad273f19351af8f535e9
SHA1 9f5f827b33da653ab0db0d13302de2827366bd48
SHA512 70cf07e24d92a16e50e74b3ca1811cc5dbcad59a6ca3b3463f263bb7fe7988b2ae467acff1f4768a20b16aba7b4ac59e6517dbf733f699275b130b9cd22ca7af
SSDEEP 12288:M+oYUA43ajwZ11gkuM+SlaJKXeR2NA+ULt70BjvrEH7SsN9:43apkAzP2K++wrEH7SsN9
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4987a7297078ad273f19351af8f535e9.exe

.exe 450KB

4987a7297078ad273f19351af8f535e9.exe

IMPHASH 672f4cae333cd1c185b703423ad03761
SHA256 12935ca1073fff08eb4fbd5d4cd1707b0fce7dd92a2106cac5af92de0451ffaf
MD5 4987a7297078ad273f19351af8f535e9
SHA1 9f5f827b33da653ab0db0d13302de2827366bd48
SHA512 70cf07e24d92a16e50e74b3ca1811cc5dbcad59a6ca3b3463f263bb7fe7988b2ae467acff1f4768a20b16aba7b4ac59e6517dbf733f699275b130b9cd22ca7af
SSDEEP 12288:M+oYUA43ajwZ11gkuM+SlaJKXeR2NA+ULt70BjvrEH7SsN9:43apkAzP2K++wrEH7SsN9
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

42384

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileWithProgressA GetProfileSectionW VerifyVersionInfoA LocalFree SetProcessPriorityBoost VirtualQuery GlobalGetAtomNameW FindResourceW GetComputerNameExW GetModuleHandleW GetTempPathW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA VirtualLock GetTapeParameters UnlockFile GetAtomNameA FlushConsoleInputBuffer TerminateProcess EnumResourceLanguagesW GetCPInfoExW SetThreadContext lstrlenA SetProcessAffinityMask GenerateConsoleCtrlEvent LoadLibraryW GlobalGetAtomNameA IsProcessInJob lstrcpynW WriteConsoleA MoveFileWithProgressW GetBinaryTypeA GetCommandLineA InterlockedDecrement VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA SearchPathW CopyFileW CreateActCtxW InitializeCriticalSection FindNextVolumeA GetCurrentConsoleFont GetConsoleAliasA CopyFileExW HeapReAlloc LeaveCriticalSection EnumSystemLocalesA OpenMutexA FileTimeToLocalFileTime SearchPathA GetComputerNameExA GetProcessShutdownParameters FormatMessageW InterlockedCompareExchange CreateIoCompletionPort GetPrivateProfileStructA CreateFiber InterlockedExchange EnumDateFormatsA GetNumberOfConsoleInputEvents LoadLibraryA FindResourceExW InterlockedIncrement FindActCtxSectionStringW SetConsoleCursorInfo UnregisterWait FoldStringW LocalAlloc GetFileType GetDefaultCommConfigA SetLastError lstrcpyW GetMailslotInfo GetThreadLocale GetFileAttributesA GetSystemWindowsDirectoryA GetComputerNameW ReadConsoleInputA EnumTimeFormatsA _hwrite GetQueuedCompletionStatus lstrcatW GetFullPathNameW DebugBreakProcess AddAtomW SetCurrentDirectoryA SetCalendarInfoW FindNextChangeNotification ExitProcess GetVolumeInformationW RaiseException GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError SetFilePointer GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA GetConsoleOutputCP CloseHandle CreateFileA

user32

GetMessageTime

gdi32

SelectObject GetBoundsRect

Sharing