b134c7a2f5c2a50f2fceead9cc6d63e4[.]exe

General

Target
b134c7a2f5c2a50f2fceead9cc6d63e4.exe
Size 284KB
Sample230531-a4mgpscb86
SHA256 a18deeea319275d2d941fa683df3941af08dc6a3d440eace130bedd5676af90f
MD5 b134c7a2f5c2a50f2fceead9cc6d63e4
SHA1 12a9154a5fb2d35ac3a6bcfe890b243a8e629fe5
SHA512 6e0b7f86e5c4fc6c7504a0eb3fb377bb56602f5e8794a6ac1e33d93acfef42388f7799ae15087e1901638ebc5210fde80b0841318df7f474339fc7a5409b91d9
SSDEEP 3072:Sqe+qbwDMdGiBkHfFFGV4krF9YtkfzfECkep0Bt1yNmnSwA890W92v5dM+l/TUjr:WbwiBOFoV4CFf7ENjvSFWwvHM+l97w
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b134c7a2f5c2a50f2fceead9cc6d63e4.exe

File Explorer

b134c7a2f5c2a50f2fceead9cc6d63e4.exe

.exe 284KB

b134c7a2f5c2a50f2fceead9cc6d63e4.exe

IMPHASH 27113c217d53f26eb8f070c56bd3d296
SHA256 a18deeea319275d2d941fa683df3941af08dc6a3d440eace130bedd5676af90f
MD5 b134c7a2f5c2a50f2fceead9cc6d63e4
SHA1 12a9154a5fb2d35ac3a6bcfe890b243a8e629fe5
SHA512 6e0b7f86e5c4fc6c7504a0eb3fb377bb56602f5e8794a6ac1e33d93acfef42388f7799ae15087e1901638ebc5210fde80b0841318df7f474339fc7a5409b91d9
SSDEEP 3072:Sqe+qbwDMdGiBkHfFFGV4krF9YtkfzfECkep0Bt1yNmnSwA890W92v5dM+l/TUjr:WbwiBOFoV4CFf7ENjvSFWwvHM+l97w
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19218

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetLogicalDriveStringsW InterlockedCompareExchange GetModuleHandleW VirtualFree IsBadReadPtr GetNumberFormatA GetDateFormatA GlobalAlloc FreeConsole GetCalendarInfoA GetStringTypeExW FindNextVolumeW IsProcessorFeaturePresent ReplaceFileW CreateActCtxA DeactivateActCtx OpenMutexW GetLastError GetProcAddress AttachConsole CreateTimerQueueTimer SetStdHandle LoadLibraryA CreateFileMappingA DeleteTimerQueue GetFileType WritePrivateProfileStringA FindFirstVolumeMountPointW CreateEventW GetCurrentConsoleFont WaitForMultipleObjects GetModuleFileNameA SetConsoleCursorInfo lstrcmpiW GetModuleHandleA GetFileAttributesExW GetCurrentThreadId GetVersionExA FindAtomW AddConsoleAliasA DebugBreak ReadConsoleOutputCharacterW GetConsoleAliasesLengthW WritePrivateProfileStructA VirtualAlloc CreateMutexW MultiByteToWideChar HeapFree GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapAlloc HeapCreate DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetStdHandle Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode HeapSize FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

CharLowerBuffA

gdi32

GetCharABCWidthsFloatA EnumFontsA GetCharWidthW

Sharing