4b881e9159f3a70e0dce2f0c5a6a357ad095920bb53e523bc08617b46750d42e

General

Target
4b881e9159f3a70e0dce2f0c5a6a357ad095920bb53e523bc08617b46750d42e
Size 93KB
Sample221002-l4p4dabhdq
SHA256 4b881e9159f3a70e0dce2f0c5a6a357ad095920bb53e523bc08617b46750d42e
MD5 6e02f095ca8c727e5d30484722463ea6
SHA1 3776006d7c369e22665faf497ed261d26fbaef9e
SHA512 0ec21c1344704af76fa0bf15d245b4b5a64912f794d7442eb91793055a2f39e67df7bff6151432a8a5d8d8a6cf89568f5f2bdc206d1a65a36c63429a1adf0d6f
SSDEEP 1536:CR9ieUxc+/RAhDcaPLXbblAyQIrZBQlgSJ0:CR8j6hDHAyQIrZBbSJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4b881e9159f3a70e0dce2f0c5a6a357ad095920bb53e523bc08617b46750d42e

.exe 93KB

4b881e9159f3a70e0dce2f0c5a6a357ad095920bb53e523bc08617b46750d42e

IMPHASH 9f5761998f279b09ce8ded813ca7e18c
SHA256 4b881e9159f3a70e0dce2f0c5a6a357ad095920bb53e523bc08617b46750d42e
MD5 6e02f095ca8c727e5d30484722463ea6
SHA1 3776006d7c369e22665faf497ed261d26fbaef9e
SHA512 0ec21c1344704af76fa0bf15d245b4b5a64912f794d7442eb91793055a2f39e67df7bff6151432a8a5d8d8a6cf89568f5f2bdc206d1a65a36c63429a1adf0d6f
SSDEEP 1536:CR9ieUxc+/RAhDcaPLXbblAyQIrZBQlgSJ0:CR8j6hDHAyQIrZBbSJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16777

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetSpecialFolderPathW ShellExecuteW

kernel32

CloseHandle SetFileTime CreateFileW CopyFileW SetFileAttributesW GetModuleFileNameW FindFirstFileW WaitForSingleObject CreateProcessW FindNextFileW CreateDirectoryW GetFileTime GetSystemDirectoryW DeviceIoControl Sleep GetLastError CreateMutexW GetLogicalDriveStringsW FindClose GetDiskFreeSpaceExW GetEnvironmentStrings HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA FlushFileBuffers

advapi32

RegOpenKeyExW RegSetValueExW RegCloseKey RegQueryValueExW

Name

.text

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

vxqnghi

Size

Virtual Size

72KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

4b881e9159f3a70e0dce2f0c5a6a357ad095920bb53e523bc08617b46750d42e

shell32

kernel32

advapi32