aa9462a53e3fc2ff2adc2258bb2b0daf[.]exe

General

Target
aa9462a53e3fc2ff2adc2258bb2b0daf.exe
Size 205KB
Sample230608-dafnvabf7v
SHA256 fbc6da599bbb6e9f8910a1c9369049dd9e7cf0e91f65c52dbe4d8c7204d85c02
MD5 aa9462a53e3fc2ff2adc2258bb2b0daf
SHA1 e11a6bf8b5d1a951f43e72c1def57316164c9309
SHA512 c95e10430a288d118152f357455fe2f7ddf2b6965c45b11b9cd4fb64493fd4b224edf1cfbd1fa228bf36f2ce45a32a32b10032ad42fa6254a9a3cba16e69776b
SSDEEP 3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa9462a53e3fc2ff2adc2258bb2b0daf.exe

File Explorer

aa9462a53e3fc2ff2adc2258bb2b0daf.exe

.exe 205KB

aa9462a53e3fc2ff2adc2258bb2b0daf.exe

IMPHASH f8cc61ade86cb7277d0ab974de6323cb
SHA256 fbc6da599bbb6e9f8910a1c9369049dd9e7cf0e91f65c52dbe4d8c7204d85c02
MD5 aa9462a53e3fc2ff2adc2258bb2b0daf
SHA1 e11a6bf8b5d1a951f43e72c1def57316164c9309
SHA512 c95e10430a288d118152f357455fe2f7ddf2b6965c45b11b9cd4fb64493fd4b224edf1cfbd1fa228bf36f2ce45a32a32b10032ad42fa6254a9a3cba16e69776b
SSDEEP 3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

87711

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA CreateFileA CloseHandle GetSystemInfo CreateThread HeapAlloc GetThreadContext GetProcAddress VirtualAllocEx LocalFree GetLastError ReadProcessMemory GetProcessHeap CreateProcessA CreateDirectoryA SetThreadContext WriteConsoleW ReadConsoleW SetEndOfFile SetFilePointerEx GetTempPathA Sleep SetCurrentDirectoryA GetModuleHandleA GetComputerNameExW ResumeThread GetVersionExW CreateMutexA VirtualAlloc WriteFile VirtualFree HeapFree WriteProcessMemory GetModuleFileNameA RemoveDirectoryA ReadFile HeapReAlloc HeapSize GetTimeZoneInformation GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetStdHandle GetFullPathNameW GetCurrentDirectoryW DeleteFileW LCMapStringW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RaiseException SetLastError RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW CreateFileW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW MultiByteToWideChar CompareStringW DecodePointer

advapi32

RegCloseKey RegQueryValueExA GetUserNameA RegSetValueExA RegOpenKeyExA ConvertSidToStringSidW GetUserNameW LookupAccountNameW

shell32

SHGetFolderPathA ShellExecuteA ord680 SHFileOperationA

wininet

HttpOpenRequestA InternetReadFile InternetConnectA HttpSendRequestA InternetCloseHandle InternetOpenA InternetOpenW InternetOpenUrlA

Sharing