4a8b6f8cb475573b90e11a72e4670476[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
4a8b6f8cb475573b90e11a72e4670476.exe
Size 2.6MB
Sample230102-jqdr3sdf79
SHA256 be7331dd3b9faf80763ec2f18febca7a0ec296b7c97384d753ed6c74d0969fc7
MD5 4a8b6f8cb475573b90e11a72e4670476
SHA1 d7a29005694e0b388e9e665550df934a14485066
SHA512 6a7f712bbbce0da4a5020790bea28860325f372bcad8fdce9d51a33c33b822dd657300863a5dac85d5c57ffe1a466f8fb2be4e82290ac00219ab757ea42fc83e
SSDEEP 49152:sb34dHpTJgRBHVcyaSPNVssisGOk4LQkSJf6RhrZKa:s3oECDSPNVssisGOZQ7fK
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4a8b6f8cb475573b90e11a72e4670476.exe

.exe 2.6MB

4a8b6f8cb475573b90e11a72e4670476.exe

IMPHASH 6f26411934f89c7533c9f4d1d0fd62ec
SHA256 be7331dd3b9faf80763ec2f18febca7a0ec296b7c97384d753ed6c74d0969fc7
MD5 4a8b6f8cb475573b90e11a72e4670476
SHA1 d7a29005694e0b388e9e665550df934a14485066
SHA512 6a7f712bbbce0da4a5020790bea28860325f372bcad8fdce9d51a33c33b822dd657300863a5dac85d5c57ffe1a466f8fb2be4e82290ac00219ab757ea42fc83e
SSDEEP 49152:sb34dHpTJgRBHVcyaSPNVssisGOk4LQkSJf6RhrZKa:s3oECDSPNVssisGOZQ7fK
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

1591585

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

htons inet_ntoa ntohs recv select send setsockopt shutdown socket gethostbyname WSAStartup WSAGetLastError WSAIoctl inet_addr bind closesocket connect ioctlsocket getsockname getsockopt __WSAFDIsSet

kernel32

LoadLibraryExA GetEnvironmentVariableA GetVolumeInformationA WaitForSingleObject OpenProcess CreateToolhelp32Snapshot GetExitCodeThread Sleep GetLastError AttachConsole LoadLibraryA Process32Next CloseHandle GetSystemInfo GetLocalTime GetProcAddress VirtualAllocEx GetCurrentProcessId FreeLibrary CreateRemoteThread VirtualFreeEx AllocConsole CompareFileTime GetSystemTime FileTimeToSystemTime SystemTimeToFileTime GetTimeZoneInformation InitializeCriticalSection EnterCriticalSection LeaveCriticalSection SetConsoleTitleA GetCurrentDirectoryA GetCurrentDirectoryW CreateDirectoryW CreateFileW DeleteFileW SetCurrentConsoleFontEx GetFullPathNameW SetFileAttributesW SetFilePointer MoveFileW GetSystemTimeAsFileTime GetTickCount FormatMessageA GetComputerNameW GetACP GetOEMCP QueryPerformanceCounter GetCurrentThreadId CreateThread GetFileSize ReadFile SetEndOfFile WriteFile LoadLibraryW GetVersionExA SetLastError WriteProcessMemory Process32First GetFileAttributesW GetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW DeleteCriticalSection InitializeSListHead

user32

FindWindowA

advapi32

RegCloseKey CryptAcquireContextA RegOpenKeyExW RegOpenKeyExA AdjustTokenPrivileges OpenProcessToken RegQueryValueExA CryptSignHashA CryptSetHashParam CryptDestroyHash CryptCreateHash CryptExportKey CryptDestroyKey CryptGenRandom CryptGetUserKey CryptGetProvParam CryptReleaseContext

shell32

ShellExecuteA

msvcp140

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Xlength_error@std@@YAXPBD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

iphlpapi

GetAdaptersInfo

vcruntime140

_except_handler4_common _CxxThrowException __current_exception_context __current_exception memmove memchr memcpy wcsstr strstr memset __std_terminate __std_exception_copy __std_exception_destroy __CxxFrameHandler3 strchr

api-ms-win-crt-stdio-l1-1-0

ferror _fileno _filelength fgetpos _chsize_s fseek fgetc ungetc fopen_s __stdio_common_vfprintf fsetpos fread _fseeki64 fwrite _telli64 freopen_s fclose fflush __acrt_iob_func fputc _get_stream_buffer_pointers _set_fmode _filelengthi64 __stdio_common_vsprintf setvbuf __p__commode

api-ms-win-crt-utility-l1-1-0

rand srand

api-ms-win-crt-filesystem-l1-1-0

_lock_file remove _unlock_file

api-ms-win-crt-string-l1-1-0

isalnum towupper towlower wcscpy_s toupper _strnicmp strncmp _stricmp tolower

api-ms-win-crt-runtime-l1-1-0

exit _exit _initterm _set_app_type _get_narrow_winmain_command_line _initterm_e _invalid_parameter_noinfo_noreturn _seh_filter_exe _cexit system _crt_atexit _register_onexit_function _controlfp_s terminate _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _register_thread_local_exe_atexit_callback _c_exit

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64 _tzset _mktime64

api-ms-win-crt-heap-l1-1-0

_set_new_mode free _callnewh malloc

api-ms-win-crt-convert-l1-1-0

_atoi64 atoi _itoa

api-ms-win-crt-environment-l1-1-0

_dupenv_s

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale