ee9f9565049005c3fc1dfd32db706ef8[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ee9f9565049005c3fc1dfd32db706ef8.exe
Size 308KB
Sample230606-erctysbh92
SHA256 41fe567d55eb7815d15fe5f3408a902f5743a42b2d6b58a6eac7455a06e52d28
MD5 ee9f9565049005c3fc1dfd32db706ef8
SHA1 1761611775aa66b437e8e79ae2e7cdb295501bf7
SHA512 466eb8863f2c91178f197fd560a4b1829946f2910b94f75cc345522ec60b1d0827707628a50627f3ae5f441f239d0f22330c5983ac8f04c2efaea87153ad8a1b
SSDEEP 3072:gIH9W+aUwWAKRpHFeyYMPg0GQx/KD9tlnZ9OrsL1z17toIhRXIB7NE4:gIHaXW3HFOMsZYM1znexE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee9f9565049005c3fc1dfd32db706ef8.exe

File Explorer

ee9f9565049005c3fc1dfd32db706ef8.exe

.exe 308KB

ee9f9565049005c3fc1dfd32db706ef8.exe

IMPHASH 58c5d357101428118c079002a7efbddf
SHA256 41fe567d55eb7815d15fe5f3408a902f5743a42b2d6b58a6eac7455a06e52d28
MD5 ee9f9565049005c3fc1dfd32db706ef8
SHA1 1761611775aa66b437e8e79ae2e7cdb295501bf7
SHA512 466eb8863f2c91178f197fd560a4b1829946f2910b94f75cc345522ec60b1d0827707628a50627f3ae5f441f239d0f22330c5983ac8f04c2efaea87153ad8a1b
SSDEEP 3072:gIH9W+aUwWAKRpHFeyYMPg0GQx/KD9tlnZ9OrsL1z17toIhRXIB7NE4:gIHaXW3HFOMsZYM1znexE
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20593

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteFileA FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA GetStringTypeExA GetThreadLocale GetShortPathNameA GetFileAttributesA GetFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetFileTime SetFileAttributesA FileTimeToSystemTime FileTimeToLocalFileTime RtlUnwind HeapReAlloc GetStartupInfoA GetCommandLineA ExitProcess TerminateProcess CreateThread ExitThread RaiseException HeapSize GetACP GetTimeZoneInformation GetSystemTime GetLocalTime GetEnvironmentVariableA MoveFileA HeapDestroy HeapCreate IsBadWritePtr FatalAppExitA UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID SetConsoleCtrlHandler CompareStringA CompareStringW SetEnvironmentVariableA GetLocaleInfoW SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetCurrentProcess DuplicateHandle SetErrorMode GetOEMCP GetCPInfo SizeofResource GetProcessVersion GetLastError MultiByteToWideChar WideCharToMultiByte InterlockedExchange InterlockedIncrement GetCurrentDirectoryA WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA GlobalFlags lstrlenA lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc InterlockedDecrement MulDiv SetLastError GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CreateEventA SuspendThread SetThreadPriority ResumeThread SetEvent WaitForSingleObject GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId FreeLibrary HeapFree LoadLibraryA GetProcAddress VirtualFree VirtualProtect VirtualAlloc GetProcessHeap HeapAlloc GetFileSize ReadFile CreateFileA WriteFile CloseHandle GetVersionExA Sleep

user32

EndDeferWindowPos CopyRect BeginDeferWindowPos DeferWindowPos EqualRect ScreenToClient AdjustWindowRectEx SetFocus GetSysColor MapWindowPoints SendDlgItemMessageA UpdateWindow CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked ScrollWindowEx IsDialogMessageA SetWindowTextA MoveWindow ShowWindow ClientToScreen GetDC ReleaseDC GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA LoadCursorA SetCapture ReleaseCapture WaitMessage GetDesktopWindow GetWindowThreadProcessId WindowFromPoint GetClassNameA PtInRect InsertMenuA DeleteMenu GetMenuStringA CharToOemA OemToCharA GetSysColorBrush LoadStringA GetDialogBaseUnits DestroyMenu SetRectEmpty LoadAcceleratorsA TranslateAcceleratorA LoadMenuA SetMenu ReuseDDElParam UnpackDDElParam InvalidateRect BringWindowToTop CharUpperA ScrollWindow GetScrollInfo SetScrollInfo ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID TrackPopupMenu SetWindowPlacement GetWindowTextLengthA GetWindowTextA GetDlgCtrlID CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow GetWindow SetWindowLongA SetWindowPos RegisterWindowMessageA IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA SetCursor ShowOwnedPopups PostQuitMessage PostMessageA LoadIconA EnableWindow GetClientRect IsIconic SendMessageA DrawIcon GetSystemMetrics OffsetRect UnregisterClassA

gdi32

SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx SelectClipRgn ExcludeClipRect IntersectClipRect OffsetClipRgn MoveToEx LineTo SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags GetCurrentPositionEx ArcTo SetArcDirection PolyDraw GetObjectA PolylineTo SetColorAdjustment SetStretchBltMode DeleteObject SetPolyFillMode CreateRectRgn SelectClipPath ExtSelectClipRgn PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile GetDeviceCaps GetViewportExtEx GetWindowExtEx CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreatePatternBrush CreateDIBPatternBrushPt PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextExtentPoint32A GetTextMetricsA CreateFontIndirectA PolyBezierTo SetROP2 SetBkColor SetTextColor GetClipBox SetBkMode SelectPalette GetStockObject SelectObject RestoreDC SaveDC StartDocA GetClipRgn CreateBitmap GetDCOrgEx DeleteDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegDeleteKeyA RegDeleteValueA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey RegOpenKeyA

shell32

SHGetFileInfoA DragQueryFileA DragAcceptFiles DragFinish

comctl32

ord17

imagehlp

MakeSureDirectoryPathExists

Name

.text

Size

204KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

28KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ