4ed8028403168fb8a352524704c44baf[.]exe

General

Target
4ed8028403168fb8a352524704c44baf.exe
Size 231KB
Sample221226-fx5mlace42
SHA256 d91a27a04ac9e4fc3ddfbb37372f0587cb62b8be0ec0cf5afc52a2c4c8ca4ee5
MD5 4ed8028403168fb8a352524704c44baf
SHA1 5b3f66f71ed5f1f29865c52188720f50c1f72a53
SHA512 29b3efcc25c3ca7c446201526bb5e0fa1e9064bd7396da5b8a6002487c65752d2cb51c6b8cce8b85878c57b14486aec9c852635c38bb6006a9f96b8f23ce999e
SSDEEP 6144:zJ9LMqgZOl6VHtdr/Qfrjqet5tK85z/bIr:zv4JcI/EXtFL8r
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4ed8028403168fb8a352524704c44baf.exe

.exe 231KB

4ed8028403168fb8a352524704c44baf.exe

IMPHASH 997a79bbc9b29ccf624aa79059ded875
SHA256 d91a27a04ac9e4fc3ddfbb37372f0587cb62b8be0ec0cf5afc52a2c4c8ca4ee5
MD5 4ed8028403168fb8a352524704c44baf
SHA1 5b3f66f71ed5f1f29865c52188720f50c1f72a53
SHA512 29b3efcc25c3ca7c446201526bb5e0fa1e9064bd7396da5b8a6002487c65752d2cb51c6b8cce8b85878c57b14486aec9c852635c38bb6006a9f96b8f23ce999e
SSDEEP 6144:zJ9LMqgZOl6VHtdr/Qfrjqet5tK85z/bIr:zv4JcI/EXtFL8r
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14964

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileApisToOEM SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree GlobalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxW GetConsoleAliasesLengthA GetPrivateProfileIntA _lread SetVolumeMountPointW EnumResourceLanguagesW LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA InterlockedCompareExchange FreeEnvironmentStringsA InterlockedExchangeAdd GetModuleHandleW SetLastError GetLogicalDrives EnumDateFormatsW OpenMutexA OpenJobObjectW LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

DrawCaption

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownW

Sharing