ec46fb043f2e7ee348cd68b7d3237f21[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ec46fb043f2e7ee348cd68b7d3237f21.exe
Size 377KB
Sample230607-mxtcwsac41
SHA256 5a6efc81f1a3e1c8266cbacdeaf04ee400dfcc3bc5998c6df13e68ad6f51cdc7
MD5 ec46fb043f2e7ee348cd68b7d3237f21
SHA1 7e33dc696b2a598ef0a6347f700893e3b5f6a5e7
SHA512 7db3dc019f218400cf5541a06476a64d0d7e06b5d7a74b315db3bb325e971dab0699152766e126d7451420eb57e69a6f4aa3b143266a18ed5f08b4e16e7e37c1
SSDEEP 6144:PlJY828QW4uSz6johYa9QXA0JMN1KvYikHODhD3+iXaKf:PdzWz6j6YGQX1GDKrkuFrpXJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec46fb043f2e7ee348cd68b7d3237f21.exe

File Explorer

ec46fb043f2e7ee348cd68b7d3237f21.exe

.exe 377KB

ec46fb043f2e7ee348cd68b7d3237f21.exe

IMPHASH 3d0c655c32a535ca28a2093dcc0c4d13
SHA256 5a6efc81f1a3e1c8266cbacdeaf04ee400dfcc3bc5998c6df13e68ad6f51cdc7
MD5 ec46fb043f2e7ee348cd68b7d3237f21
SHA1 7e33dc696b2a598ef0a6347f700893e3b5f6a5e7
SHA512 7db3dc019f218400cf5541a06476a64d0d7e06b5d7a74b315db3bb325e971dab0699152766e126d7451420eb57e69a6f4aa3b143266a18ed5f08b4e16e7e37c1
SSDEEP 6144:PlJY828QW4uSz6johYa9QXA0JMN1KvYikHODhD3+iXaKf:PdzWz6j6YGQX1GDKrkuFrpXJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33418

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW WaitForSingleObject InterlockedCompareExchange AddConsoleAliasW GetModuleHandleW GetTickCount VirtualFree GenerateConsoleCtrlEvent GetConsoleAliasesA GetConsoleAliasesLengthA GetDateFormatA GetPriorityClass GlobalAlloc AddRefActCtx LoadLibraryW GetLocaleInfoW GetCalendarInfoW FreeConsole GetVersionExW GetModuleFileNameW DeactivateActCtx OpenMutexW FindResourceExW GetCurrentDirectoryW ChangeTimerQueueTimer SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA GetConsoleScreenBufferInfo GetNumberFormatW GetCurrentConsoleFont FindAtomA GetModuleFileNameA FindFirstVolumeMountPointA GetModuleHandleA GetCommTimeouts VirtualProtect WaitForDebugEvent GetCurrentThreadId OpenFileMappingA FindNextVolumeA ReadFile GetProcessHeap WritePrivateProfileStructA GetLastError CreateMutexW SetEndOfFile FlushFileBuffers WriteConsoleW GetConsoleOutputCP InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc SetHandleCount GetStdHandle GetFileType HeapCreate HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree HeapSize ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA SetStdHandle

user32

CharToOemBuffW GetCaretPos GetComboBoxInfo

gdi32

GetCharacterPlacementW

advapi32

GetEventLogInformation

winhttp

WinHttpCheckPlatform

msimg32

AlphaBlend