11b8d2f1c1da99d2eec370ecf4bca6fc[.]exe

General

Target
11b8d2f1c1da99d2eec370ecf4bca6fc.exe
Size 363KB
Sample230528-h6nrjsfa31
SHA256 bf9f1faeb5ffafd35851df4a42f7a486ad0b2eb3f77ccc943c4cd21d1a75e3c0
MD5 11b8d2f1c1da99d2eec370ecf4bca6fc
SHA1 de11984271c74e9169237fa9d4391b17e871b23f
SHA512 ad7e05230478a363db6f07915f7675c396c85e3c7f843c1d0c4cac762acd45509f40836f9119a19d38693ff4c416c0a157afe996347c666245c6de06cc89ea5f
SSDEEP 6144:bls/DTNiyXaYJczQRmImjkj/Tjrtim4EeOoP0/:pi/QIaYJIQcX6/JimP9o
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b8d2f1c1da99d2eec370ecf4bca6fc.exe

File Explorer

11b8d2f1c1da99d2eec370ecf4bca6fc.exe

.exe 363KB

11b8d2f1c1da99d2eec370ecf4bca6fc.exe

IMPHASH d683fcb523ac92743f5db043ced73806
SHA256 bf9f1faeb5ffafd35851df4a42f7a486ad0b2eb3f77ccc943c4cd21d1a75e3c0
MD5 11b8d2f1c1da99d2eec370ecf4bca6fc
SHA1 de11984271c74e9169237fa9d4391b17e871b23f
SHA512 ad7e05230478a363db6f07915f7675c396c85e3c7f843c1d0c4cac762acd45509f40836f9119a19d38693ff4c416c0a157afe996347c666245c6de06cc89ea5f
SSDEEP 6144:bls/DTNiyXaYJczQRmImjkj/Tjrtim4EeOoP0/:pi/QIaYJIQcX6/JimP9o
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20089

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddConsoleAliasW SleepEx GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA FreeConsole GetVersionExW WritePrivateProfileStructW GetNamedPipeInfo MulDiv GetModuleFileNameW CreateActCtxA ReplaceFileA GetStringTypeExA CreateJobObjectA GetProfileIntA GetStdHandle GetLogicalDriveStringsA GetLastError ReadConsoleOutputCharacterA GetProcAddress CancelWaitableTimer GetLongPathNameA VirtualAlloc EnterCriticalSection _hwrite LoadLibraryA OpenMutexA InterlockedExchangeAdd LocalAlloc GetFileType CreateFileMappingW FindFirstVolumeMountPointW GetNumberFormatW CreateEventW GetModuleFileNameA lstrcmpiW GetModuleHandleA GetProcessShutdownParameters CreateMutexA GetFileAttributesExW FindAtomW EnumResourceLanguagesW DebugBreak FindNextVolumeA WaitForSingleObject GetConsoleAliasA FindResourceW GetCommState AttachConsole GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WideCharToMultiByte SetHandleCount DeleteCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

user32

CharLowerBuffA

gdi32

GetCharWidthW EnumFontsW GetCharABCWidthsFloatW

advapi32

MapGenericMask

Sharing