42e701f99294b784445812bb6e707326c7c522dc5151e1c12f919ce47f53f1c7

Sharing

Copy URL Twitter E-mail

General

Target
42e701f99294b784445812bb6e707326c7c522dc5151e1c12f919ce47f53f1c7
Size 602KB
Sample221122-ac4lxacc86
SHA256 42e701f99294b784445812bb6e707326c7c522dc5151e1c12f919ce47f53f1c7
MD5 abb29007781aabcc01e554e44ee836cd
SHA1 c0e4852538a05b06c7f9a1613bf6745cc451f295
SHA512 7be312807efd4e50a8773eab1d4f1a0e38cf3cf4dd92b4ee1fdf764a304c9a0e717e52a37f263dbcd1fa491d42dd82b3cbbb6e7dea07d3f642b7b77e177a1b7c
SSDEEP 12288:KIny5DYTNv42uIexZ3s8bTktCxpN8dySx4y/isK0q:MUTN4ZIenl/ktgL8wVyK30q
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

42e701f99294b784445812bb6e707326c7c522dc5151e1c12f919ce47f53f1c7

.exe 602KB

42e701f99294b784445812bb6e707326c7c522dc5151e1c12f919ce47f53f1c7

IMPHASH 7592ad133be9316878a30ffd6f55c5b0
SHA256 42e701f99294b784445812bb6e707326c7c522dc5151e1c12f919ce47f53f1c7
MD5 abb29007781aabcc01e554e44ee836cd
SHA1 c0e4852538a05b06c7f9a1613bf6745cc451f295
SHA512 7be312807efd4e50a8773eab1d4f1a0e38cf3cf4dd92b4ee1fdf764a304c9a0e717e52a37f263dbcd1fa491d42dd82b3cbbb6e7dea07d3f642b7b77e177a1b7c
SSDEEP 12288:KIny5DYTNv42uIexZ3s8bTktCxpN8dySx4y/isK0q:MUTN4ZIenl/ktgL8wVyK30q
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

69567

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA GetProcAddress LoadLibraryA SetLastError FindClose FindFirstFileW LoadLibraryW GetVersionExW GetTickCount CloseHandle ReadFile GetFileSize CreateFileW GetVersion WaitForSingleObject CreateThread SizeofResource GetModuleFileNameW LoadResource VirtualProtect EnumResourceNamesW GetCommandLineW GetCommandLineA GetConsoleWindow AddVectoredExceptionHandler SetEndOfFile HeapReAlloc SetFilePointer WriteConsoleW SetStdHandle GetLastError GetModuleHandleW GetCurrentProcessId CreateToolhelp32Snapshot Module32FirstW LockResource Module32NextW GetStringTypeW MultiByteToWideChar LCMapStringW HeapSize GetCurrentProcess FlushInstructionCache EnterCriticalSection LeaveCriticalSection FindResourceExW InterlockedExchange GetProcessHeap Sleep GetSystemTimeAsFileTime QueryPerformanceCounter RtlUnwind ExitProcess DecodePointer RaiseException HeapSetInformation GetStartupInfoW HeapAlloc HeapFree EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount DeleteCriticalSection WriteFile GetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate

user32

ShowWindow CloseWindow LoadIconA CreateWindowExW LoadCursorW LoadIconW EnumWindows LoadBitmapW

gdi32

DeleteObject GetObjectW SelectObject DeleteDC CreateCompatibleDC GetPixel

ole32

StringFromIID CoTaskMemFree CoGetClassObject

advapi32

RegSetValueW RegCloseKey RegOpenKeyExW RegQueryValueExW RegOpenKeyW

dbghelp

ImageDirectoryEntryToData ImageNtHeader

gdiplus

GdiplusShutdown