4525da518da4d8644df5834756776c7b[.]exe

General

Target
4525da518da4d8644df5834756776c7b.exe
Size 744KB
Sample221224-kg2cfsda2w
SHA256 58ffdedad7310d83d66e0ac607d7bd7271be5308adfa48c1a54447bd5c692ff1
MD5 4525da518da4d8644df5834756776c7b
SHA1 677d891e6194e9016e46e1357a81c525a07267ff
SHA512 b4017e7e9c1db5dfc28594e5681daa5ae0ebabefd248486fc5d1f8f8478021656d0ec5fb566354e383aa5eed295762ca28cf12d88c32c574a44f6b49ad7473ca
SSDEEP 12288:PcTvfrgC66FgkHcl/prjQYHNpa0o+fQNAfWO3/X16cMd+5KGnOClX/BEfaSpwY:SIFDQ8ip+uO3/X1GiOUX/miST
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4525da518da4d8644df5834756776c7b.exe

.exe 744KB

4525da518da4d8644df5834756776c7b.exe

IMPHASH 0f62cbc7643f42122f2a6a439e78270c
SHA256 58ffdedad7310d83d66e0ac607d7bd7271be5308adfa48c1a54447bd5c692ff1
MD5 4525da518da4d8644df5834756776c7b
SHA1 677d891e6194e9016e46e1357a81c525a07267ff
SHA512 b4017e7e9c1db5dfc28594e5681daa5ae0ebabefd248486fc5d1f8f8478021656d0ec5fb566354e383aa5eed295762ca28cf12d88c32c574a44f6b49ad7473ca
SSDEEP 12288:PcTvfrgC66FgkHcl/prjQYHNpa0o+fQNAfWO3/X16cMd+5KGnOClX/BEfaSpwY:SIFDQ8ip+uO3/X1GiOUX/miST
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15804

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumSystemCodePagesA OpenMutexW GetConsoleAliasesLengthA SetFileApisToOEM EnumCalendarInfoExW RequestWakeupLatency GetConsoleAliasW GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsA ReadConsoleInputA FindNextVolumeMountPointW SearchPathW CopyFileExW GetCurrentDirectoryA GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedExchange DebugActiveProcess GetConsoleMode FindFirstVolumeA LocalFree LocalFlags InterlockedIncrement ProcessIdToSessionId OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynA CallNamedPipeW PeekNamedPipe GetCurrencyFormatW FindNextVolumeA CreateActCtxA OpenJobObjectA GetPrivateProfileIntA _lread SetVolumeMountPointW GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx ReadFile MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW GetConsoleFontSize GetConsoleAliasExesLengthA FindFirstFileA EnumResourceLanguagesW FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW GetTickCount SetLastError GetLogicalDrives GenerateConsoleCtrlEvent LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA CloseHandle

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing