qZGYOyA5rG[.]exe | Triage™

General

Target
qZGYOyA5rG.exe
Size 130KB
Sample230402-arlpmsdf57
SHA256 bdf296434f9ad3d332b00073d74a884ca78b7a6a535f1e1b63f510d9e77dc3c1
MD5 78f7ba13edd008ea22a8116e6a3b56ba
SHA1 e2fc9ef2ec44db2e01eeec52ded29ed0b24fa10f
SHA512 9af521e0ec23a902204f7effe3801f5b20e959e1d95c4e76d394087388953205aa5accd706ff6022c5e0ff11b6e728801f4847900864ee74ddea79cedf2c58c8
SSDEEP 3072:zewcPHgx8H/yC1wR9m4wHfKIu/970vZX6K:qwcKl9m/K//mvVn
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

qZGYOyA5rG.exe

.exe 130KB

qZGYOyA5rG.exe

IMPHASH f221e81f5f33991fe15aeca4466060ec
SHA256 bdf296434f9ad3d332b00073d74a884ca78b7a6a535f1e1b63f510d9e77dc3c1
MD5 78f7ba13edd008ea22a8116e6a3b56ba
SHA1 e2fc9ef2ec44db2e01eeec52ded29ed0b24fa10f
SHA512 9af521e0ec23a902204f7effe3801f5b20e959e1d95c4e76d394087388953205aa5accd706ff6022c5e0ff11b6e728801f4847900864ee74ddea79cedf2c58c8
SSDEEP 3072:zewcPHgx8H/yC1wR9m4wHfKIu/970vZX6K:qwcKl9m/K//mvVn
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

5790

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstVolumeMountPointW VirtualProtect GetCurrentProcess PeekNamedPipe WaitForSingleObject LocalAlloc SetupComm IsProcessInJob DnsHostnameToComputerNameA GetConsoleMode AddAtomA WriteConsoleInputW FindAtomA GetProcAddress GetCurrentProcessId UnhandledExceptionFilter GetModuleHandleW GetComputerNameExA CreateFileW DecodePointer WriteConsoleW SetFilePointerEx GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap RaiseException

user32

SendMessageA SetWindowsHookW GetWindow PostMessageA WaitMessage

Sharing