d521b13437cb4b492dd4e4634d693af4[.]exe

General

Target
d521b13437cb4b492dd4e4634d693af4.exe
Size 353KB
Sample230531-kbvbysdg47
SHA256 bb58187a9f2ae598a7a611c5be6b4ee42f256cef1f548d3baf2da5ba4c51b71c
MD5 d521b13437cb4b492dd4e4634d693af4
SHA1 882c7de835e3ba59bf251c504f132f06c4ea89de
SHA512 79f31d323ce52ca453cb6805af5c16f846c2ebce972bc03591b88d9bbe4287867fd7021ef2dbd35b3435cdfb2abfb91f143b78f4876230c1c55bd34de2187dcb
SSDEEP 6144:Bcf9T0+j8keEjfJSXoUSknk9V/B7WDip9ohW97ccYahiEt1X:BcVbj8keYoX1nk9VpKLhM7piEt1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d521b13437cb4b492dd4e4634d693af4.exe

File Explorer

d521b13437cb4b492dd4e4634d693af4.exe

.exe 353KB

d521b13437cb4b492dd4e4634d693af4.exe

IMPHASH da3fdef870d17fb0b828d20b59c7836e
SHA256 bb58187a9f2ae598a7a611c5be6b4ee42f256cef1f548d3baf2da5ba4c51b71c
MD5 d521b13437cb4b492dd4e4634d693af4
SHA1 882c7de835e3ba59bf251c504f132f06c4ea89de
SHA512 79f31d323ce52ca453cb6805af5c16f846c2ebce972bc03591b88d9bbe4287867fd7021ef2dbd35b3435cdfb2abfb91f143b78f4876230c1c55bd34de2187dcb
SSDEEP 6144:Bcf9T0+j8keEjfJSXoUSknk9V/B7WDip9ohW97ccYahiEt1X:BcVbj8keYoX1nk9VpKLhM7piEt1
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45903

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SearchPathW FindFirstChangeNotificationW AllocConsole GetConsoleAliasExesLengthA LoadResource InterlockedIncrement WaitNamedPipeA OpenSemaphoreA FreeEnvironmentStringsA MoveFileWithProgressA EnumCalendarInfoExW GetSystemTimeAsFileTime EnumTimeFormatsA SetProcessPriorityBoost GetDriveTypeA GetVolumePathNameW GetPrivateProfileIntA GetCalendarInfoA GetFileAttributesW SetSystemPowerState lstrcatA EnumSystemLocalesA GetProfileIntA DeleteFiber GetLastError GetCurrentDirectoryW GlobalFix SetComputerNameA ResetEvent LoadLibraryA WriteConsoleA GetProcessId InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW SetFileApisToANSI QueryDosDeviceW AddAtomA GetPrivateProfileStructA SetSystemTime GlobalWire GetModuleFileNameA FindNextFileA FindFirstVolumeMountPointA CreateIoCompletionPort GetModuleHandleA CreateMailslotA EnumDateFormatsW CompareStringA GetShortPathNameW TerminateJobObject FileTimeToLocalFileTime EnumSystemLocalesW GetProcAddress GetVolumeNameForVolumeMountPointA WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType ExitProcess WriteFile GetModuleFileNameW SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetStringTypeW GetLocaleInfoW HeapSize GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetConsoleCP GetConsoleMode LoadLibraryW SetStdHandle FlushFileBuffers WriteConsoleW CreateFileW CloseHandle

gdi32

GetCharABCWidthsW

Sharing