1224be772b3c6a1bcc5d40a698bd27e3[.]exe

General

Target
1224be772b3c6a1bcc5d40a698bd27e3.exe
Size 354KB
Sample230530-l6smaagh74
SHA256 6c3c66ce67f1a724cda543bd9e93fb17d99f7429dcbba86ed4e67fd57e776318
MD5 1224be772b3c6a1bcc5d40a698bd27e3
SHA1 27370d8fb68847415644c31b239754d72fdb1f80
SHA512 ba2d2de55f23b44889c588a5e82b082534c7e093dbe577718e8cb080649f2e7664a8817d8f552890fa71c2750aa64704dfdaacc7995fcf3ab910ddc362015a95
SSDEEP 6144:qwaGg8SdOUpUklYiEYlyAvMcUyojKf/Z4DOXCKjdY/zRCHm/j:TZsXzuPwf/eICKj+r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1224be772b3c6a1bcc5d40a698bd27e3.exe

File Explorer

1224be772b3c6a1bcc5d40a698bd27e3.exe

.exe 354KB

1224be772b3c6a1bcc5d40a698bd27e3.exe

IMPHASH 937554e81340ac479b370382e43a74d4
SHA256 6c3c66ce67f1a724cda543bd9e93fb17d99f7429dcbba86ed4e67fd57e776318
MD5 1224be772b3c6a1bcc5d40a698bd27e3
SHA1 27370d8fb68847415644c31b239754d72fdb1f80
SHA512 ba2d2de55f23b44889c588a5e82b082534c7e093dbe577718e8cb080649f2e7664a8817d8f552890fa71c2750aa64704dfdaacc7995fcf3ab910ddc362015a95
SSDEEP 6144:qwaGg8SdOUpUklYiEYlyAvMcUyojKf/Z4DOXCKjdY/zRCHm/j:TZsXzuPwf/eICKj+r
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19017

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW VirtualFree IsBadReadPtr GetConsoleAliasesLengthA WaitForMultipleObjectsEx GetPrivateProfileIntA FreeConsole GetVersionExW WritePrivateProfileStructW MulDiv GetModuleFileNameW CreateActCtxA WritePrivateProfileStringW ReplaceFileA GetStringTypeExA GetStdHandle GetLogicalDriveStringsA OpenMutexW GetLastError ReadConsoleOutputCharacterA GetProcAddress SleepEx VirtualAlloc _hwrite LoadLibraryA InterlockedExchangeAdd LocalAlloc GetFileType CreateFileMappingW FindFirstVolumeMountPointW GetNumberFormatW CreateEventW GetModuleFileNameA lstrcmpiW GetModuleHandleA CreateMutexA GetFileAttributesExW GetConsoleCursorInfo ScrollConsoleScreenBufferA GetCurrentThreadId FindAtomW EnumResourceLanguagesW DebugBreak FindNextVolumeA AddConsoleAliasW CancelWaitableTimer GetCommState WaitForSingleObject AttachConsole GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WideCharToMultiByte SetHandleCount DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

user32

CharLowerBuffA

gdi32

EnumFontsW GetCharABCWidthsFloatA GetCharWidthW

advapi32

MapGenericMask

Sharing