396bc5561591f6be2f8962c138afef43[.]exe

General

Target
396bc5561591f6be2f8962c138afef43.exe
Size 366KB
Sample230521-gla5aagd84
SHA256 794cc354a71c5992f8b303a76a4378630d320d3711ada97664ab97b99e3604e1
MD5 396bc5561591f6be2f8962c138afef43
SHA1 eacb411b9723f2bf808b9e58daf8caf8e033ae4d
SHA512 83be8d9ce3898a993b8d687ddf0ba8a563f5dd670e8993834fedb3c1e9c8c0503d797e87fce374fc31d590f1e0a2be1df5b81a61ef6f17122afc3208a96b3282
SSDEEP 6144:S7Hx1Kp8Ph1G962WHz00rmGGkS8QLwt+Pse84TK:WQ8Hs69HOGGl8B+PD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
396bc5561591f6be2f8962c138afef43.exe

File Explorer

396bc5561591f6be2f8962c138afef43.exe

.exe 366KB

396bc5561591f6be2f8962c138afef43.exe

IMPHASH bb27c4958c76443fcfe46f9765d838a2
SHA256 794cc354a71c5992f8b303a76a4378630d320d3711ada97664ab97b99e3604e1
MD5 396bc5561591f6be2f8962c138afef43
SHA1 eacb411b9723f2bf808b9e58daf8caf8e033ae4d
SHA512 83be8d9ce3898a993b8d687ddf0ba8a563f5dd670e8993834fedb3c1e9c8c0503d797e87fce374fc31d590f1e0a2be1df5b81a61ef6f17122afc3208a96b3282
SSDEEP 6144:S7Hx1Kp8Ph1G962WHz00rmGGkS8QLwt+Pse84TK:WQ8Hs69HOGGl8B+PD
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39709

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDefaultCommConfigW GetCommState InterlockedDecrement CancelWaitableTimer InterlockedCompareExchange AddConsoleAliasW SetEvent GetProcessPriorityBoost GetModuleHandleW GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA InitializeCriticalSection GlobalAlloc FatalAppExitW IsBadCodePtr GetSystemWindowsDirectoryA GetVersionExW GlobalFlags DnsHostnameToComputerNameW FindNextVolumeW GetConsoleAliasW ReplaceFileW IsDBCSLeadByte GetModuleFileNameW CreateActCtxA GetTempPathW GetLocaleInfoA CreateJobObjectA GetLogicalDriveStringsA OpenMutexW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress AttachConsole VirtualAlloc SetComputerNameA GetTempFileNameA LoadLibraryA CreateFileMappingW OpenEventA FindAtomA GetTapeParameters FindFirstVolumeMountPointA FindFirstChangeNotificationA GetConsoleTitleW GetConsoleCursorInfo WaitForDebugEvent ScrollConsoleScreenBufferA AddConsoleAliasA EnumCalendarInfoExA EnumSystemLocalesW GetConsoleAliasesLengthW lstrlenA SetThreadContext GetDateFormatW SetProcessAffinityMask GetStringTypeExA WideCharToMultiByte InterlockedIncrement InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW HeapCreate VirtualFree HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetModuleHandleA

gdi32

GetCharABCWidthsFloatW GetCharABCWidthsI EnumFontsW GetCharWidthI GetCharWidthA

Sharing