22bba8cb8d8073069232809189fccd7b[.]exe

General

Target
22bba8cb8d8073069232809189fccd7b.exe
Size 599KB
Sample230515-n5rdyade91
SHA256 6dc24d00cf8fa7fd3774480cc981c8791d61b58a3e7722522dad6aba9219f348
MD5 22bba8cb8d8073069232809189fccd7b
SHA1 61e2e5cb9373943b508430ce01a20b3758d687fc
SHA512 0a5a31252521ad0f7350de3d7a3ca29c1921060c682708004907347bce60ee625ad66c3441c8b7eff3b30ae020017f1862ba0d3967411a8616b2eb281b7ae819
SSDEEP 12288:9NYBGWYzqvW96tnMjxHBhyCjzBDZPfOiq+jH6Kxuw:9N7ZYAYMLhvZXfGbw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22bba8cb8d8073069232809189fccd7b.exe

File Explorer

22bba8cb8d8073069232809189fccd7b.exe

.exe 599KB

22bba8cb8d8073069232809189fccd7b.exe

IMPHASH d3f01eb238a51dd4f4bd8f0ab1521e96
SHA256 6dc24d00cf8fa7fd3774480cc981c8791d61b58a3e7722522dad6aba9219f348
MD5 22bba8cb8d8073069232809189fccd7b
SHA1 61e2e5cb9373943b508430ce01a20b3758d687fc
SHA512 0a5a31252521ad0f7350de3d7a3ca29c1921060c682708004907347bce60ee625ad66c3441c8b7eff3b30ae020017f1862ba0d3967411a8616b2eb281b7ae819
SSDEEP 12288:9NYBGWYzqvW96tnMjxHBhyCjzBDZPfOiq+jH6Kxuw:9N7ZYAYMLhvZXfGbw
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33902

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CancelWaitableTimer SetComputerNameW GetProcessPriorityBoost GetConsoleAliasesA EnumTimeFormatsW CreateActCtxW GetCalendarInfoW GetSystemWindowsDirectoryA SetConsoleCP HeapCreate DnsHostnameToComputerNameW GetConsoleAliasW LocalReAlloc WriteConsoleW GetModuleFileNameW ReplaceFileA GlobalUnlock GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA ReadFileEx RemoveDirectoryA GetTempFileNameA LoadLibraryA InterlockedExchangeAdd LocalAlloc ReadConsoleA GetNumberFormatW AddAtomW GetProfileStringA BeginUpdateResourceA QueryDosDeviceW FindAtomA GetDefaultCommConfigA FindFirstVolumeMountPointA EnumDateFormatsA GetModuleHandleA GetConsoleTitleW GetConsoleCursorInfo OpenEventW FatalAppExitA GetShortPathNameW GetDiskFreeSpaceExA GetWindowsDirectoryW DeleteTimerQueueTimer AddConsoleAliasA EnumCalendarInfoExA FindNextVolumeA EnumSystemLocalesW LCMapStringW WideCharToMultiByte LCMapStringA GetConsoleAliasesLengthW lstrlenA SetProcessAffinityMask IsSystemResumeAutomatic InitializeCriticalSectionAndSpinCount GetStringTypeW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapAlloc MultiByteToWideChar GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent VirtualFree HeapReAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA

user32

GetSysColorBrush ChangeMenuW GetClassInfoExA GetParent DdeQueryStringW CreateAcceleratorTableA GetWindowLongW

gdi32

GetCharABCWidthsFloatW GetCharWidthA SetColorAdjustment

winhttp

WinHttpOpen

Sharing