b64eecee73322131059674c5e895cd73[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b64eecee73322131059674c5e895cd73.exe
Size 40KB
Sample230503-mtds2aed25
SHA256 772308b9e65e5533176a0b3575bd922d7612209479652ba78849f29bf1d8f30d
MD5 b64eecee73322131059674c5e895cd73
SHA1 11c5a9345556cfd77fcf8a29d83f6d527a469ade
SHA512 1eacfd10e3cf2899491b31592474d554025cc64d4c89a86bbddf1ba8e4602ed91d92ab781b5b7864ef51520e93db7c2c6b454d6d24663361aa02ad4c39a234d1
SSDEEP 768:xJLdVpkvgLW3j/ctWc6JDZKX2pXAMLkHfUkTbZIK+c3uTI34thUsj+ki:77SvgCT/zc6J02qVbfP3uTI34tg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b64eecee73322131059674c5e895cd73.exe

File Explorer

b64eecee73322131059674c5e895cd73.exe

.exe 40KB

b64eecee73322131059674c5e895cd73.exe

IMPHASH 93dfc16ed07ebeb5b405221f10d12c0e
SHA256 772308b9e65e5533176a0b3575bd922d7612209479652ba78849f29bf1d8f30d
MD5 b64eecee73322131059674c5e895cd73
SHA1 11c5a9345556cfd77fcf8a29d83f6d527a469ade
SHA512 1eacfd10e3cf2899491b31592474d554025cc64d4c89a86bbddf1ba8e4602ed91d92ab781b5b7864ef51520e93db7c2c6b454d6d24663361aa02ad4c39a234d1
SSDEEP 768:xJLdVpkvgLW3j/ctWc6JDZKX2pXAMLkHfUkTbZIK+c3uTI34thUsj+ki:77SvgCT/zc6J02qVbfP3uTI34tg
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14042

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

PeekMessageW DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW SetDlgItemTextW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW GetDlgItemTextW CharNextA CharPrevW RegisterClassW MessageBoxIndirectW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

GetLastError WaitForSingleObject GetExitCodeProcess RemoveDirectoryW GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW WriteFile MoveFileExW GetSystemDirectoryW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode