69b2005d6d5fadc2a7c92a1f99bbba1c[.]exe

General

Target
69b2005d6d5fadc2a7c92a1f99bbba1c.exe
Size 313KB
Sample230508-cf5dqaad9x
SHA256 05ccafa7419380dbea0e637af2067f7798bfa04aa6f5f66a21bfa236b6ef22db
MD5 69b2005d6d5fadc2a7c92a1f99bbba1c
SHA1 d38d2c8edfebe1170c60cebd46de3a341b5239ae
SHA512 fccacd5c089268a9f00ed114baaa0bf70a578112c7b0aec8fa3bc733aef0ab15d9756a36a923591b53b776d4ba7239099893ba57de511105d82f78d76cba0912
SSDEEP 3072:PpXeUJLIr6pLvNJzSQZBgVoPuSQh2jxvUwrthoBbaVVxeRgW5cy3P1eF8qqT:l3J82pLvNBSQZ6GiYvwuO6Ep
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69b2005d6d5fadc2a7c92a1f99bbba1c.exe

File Explorer

69b2005d6d5fadc2a7c92a1f99bbba1c.exe

.exe 313KB

69b2005d6d5fadc2a7c92a1f99bbba1c.exe

IMPHASH e0ad233aaf9ebf0d2e326ac5df912cc9
SHA256 05ccafa7419380dbea0e637af2067f7798bfa04aa6f5f66a21bfa236b6ef22db
MD5 69b2005d6d5fadc2a7c92a1f99bbba1c
SHA1 d38d2c8edfebe1170c60cebd46de3a341b5239ae
SHA512 fccacd5c089268a9f00ed114baaa0bf70a578112c7b0aec8fa3bc733aef0ab15d9756a36a923591b53b776d4ba7239099893ba57de511105d82f78d76cba0912
SSDEEP 3072:PpXeUJLIr6pLvNJzSQZBgVoPuSQh2jxvUwrthoBbaVVxeRgW5cy3P1eF8qqT:l3J82pLvNBSQZ6GiYvwuO6Ep
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32973

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDefaultCommConfigW SetWaitableTimer ReadConsoleA GetConsoleAliasA GetCurrentActCtx GetSystemWindowsDirectoryW QueryDosDeviceA GetProfileStringW WaitForSingleObject CancelWaitableTimer AddConsoleAliasW GetModuleHandleW EnumCalendarInfoExW IsBadReadPtr GetNumberFormatA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA EnumTimeFormatsW CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetCalendarInfoA HeapCreate FindNextVolumeW Beep WriteConsoleW ReplaceFileW GetModuleFileNameW lstrlenW GlobalUnlock GetConsoleAliasesW GetLastError lstrlenA GetProcAddress VirtualAlloc CreateConsoleScreenBuffer BeginUpdateResourceW SetComputerNameA LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW IsSystemResumeAutomatic RemoveDirectoryW WriteProfileSectionW AddAtomA SetConsoleCursorInfo GetModuleHandleA GetConsoleTitleW EnumDateFormatsW GetShortPathNameW GetDiskFreeSpaceExW FindAtomW GetWindowsDirectoryW DeleteTimerQueueTimer GetTempPathA GetConsoleSelectionInfo EnumSystemLocalesW CreateFileA CloseHandle GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers SetProcessAffinityMask GetComputerNameA GetTempFileNameW GetLongPathNameW GetConsoleMode InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapAlloc MultiByteToWideChar GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent VirtualFree HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte LCMapStringW SetFilePointer GetConsoleCP

user32

SetCaretPos ToAsciiEx ChangeMenuW SetParent CreateAcceleratorTableW GetClassInfoExW GetWindowLongA GetSysColorBrush

gdi32

GetCharWidthA GetCharABCWidthsFloatW GetColorAdjustment

winhttp

WinHttpOpen

Sharing