f0fca1cbf4e4b62846f43b7240f2c566[.]exe

General

Target
f0fca1cbf4e4b62846f43b7240f2c566.exe
Size 312KB
Sample230508-g663fsba71
SHA256 fc7638f62d84fd3e510ac1cd6c3db50f5f1851947cec10aa27fc897ec893228d
MD5 f0fca1cbf4e4b62846f43b7240f2c566
SHA1 9554c9f601b520a50fb991448822520db339cc69
SHA512 ea3078145a48fbc11494b86b65d6cff278750fd63d5648fca3f23fd5b23649791c23174ba97c9cde617d1c64b5b3f0eed6dfe961b7b187e8026943d0feb4fded
SSDEEP 3072:tAX8vPXctGlJOCLRFIARRAfk1FawK/AyAnnwe8UHKssCgI5gM23P7WLOumeCQ+T:WeXc8zLHIKAfk1BSAna0AJ96LOumeW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0fca1cbf4e4b62846f43b7240f2c566.exe

File Explorer

f0fca1cbf4e4b62846f43b7240f2c566.exe

.exe 312KB

f0fca1cbf4e4b62846f43b7240f2c566.exe

IMPHASH 513663070e5d163878e1cb9d4a5e6408
SHA256 fc7638f62d84fd3e510ac1cd6c3db50f5f1851947cec10aa27fc897ec893228d
MD5 f0fca1cbf4e4b62846f43b7240f2c566
SHA1 9554c9f601b520a50fb991448822520db339cc69
SHA512 ea3078145a48fbc11494b86b65d6cff278750fd63d5648fca3f23fd5b23649791c23174ba97c9cde617d1c64b5b3f0eed6dfe961b7b187e8026943d0feb4fded
SSDEEP 3072:tAX8vPXctGlJOCLRFIARRAfk1FawK/AyAnnwe8UHKssCgI5gM23P7WLOumeCQ+T:WeXc8zLHIKAfk1BSAna0AJ96LOumeW
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32493

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetWaitableTimer ReadConsoleA GetConsoleAliasA GetCurrentActCtx GetSystemWindowsDirectoryW QueryDosDeviceA GetProfileStringW WaitForSingleObject CancelWaitableTimer AddConsoleAliasW GetModuleHandleW IsBadReadPtr GetNumberFormatA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA EnumTimeFormatsW CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost GetCalendarInfoA HeapCreate FindNextVolumeW Beep WriteConsoleW ReplaceFileW GetModuleFileNameW lstrlenW GlobalUnlock GetConsoleAliasesW GetLastError GetLongPathNameW GetProcAddress GetDefaultCommConfigW HeapSize IsBadHugeWritePtr BeginUpdateResourceW SetComputerNameA LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW IsSystemResumeAutomatic RemoveDirectoryW WriteProfileSectionW AddAtomA SetConsoleCursorInfo GetModuleHandleA GetConsoleTitleW EnumDateFormatsW GetShortPathNameW GetDiskFreeSpaceExW FindAtomW GetWindowsDirectoryW DeleteTimerQueueTimer GetTempPathA EnumCalendarInfoExA GetConsoleSelectionInfo EnumSystemLocalesW SuspendThread CreateFileA CloseHandle GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers lstrlenA GetComputerNameA SetProcessAffinityMask VirtualAlloc InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount

user32

GetMenuInfo ToAsciiEx ChangeMenuA CharLowerBuffW SetParent CreateAcceleratorTableW GetWindowLongA GetSysColorBrush

gdi32

GetCharWidthA GetCharABCWidthsFloatW GetColorAdjustment

winhttp

WinHttpOpen

Sharing