2fa99872eed966e343835350175322d3[.]exe

General

Target
2fa99872eed966e343835350175322d3.exe
Size 282KB
Sample230617-l2srgsah7x
SHA256 d7d0246b912af8d5287d7f6c170bbc135384faed0777308410040e4e64d214d5
MD5 2fa99872eed966e343835350175322d3
SHA1 21d68cf41e7c328907644d3890df04442c24df90
SHA512 ea2f2c3f6029eacc2771d1f850bac06dfaa93c1cff0da0597cbc427d321de3528276db38889d37c0b4c2aa97cb1ac27b7267a0a737b4d2dfa616dc23cf2dffd8
SSDEEP 6144:p0+ULHbDHh66tunpynsRgNXirU1penHoH:pfULHJ8XRgYAeI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa99872eed966e343835350175322d3.exe

File Explorer

2fa99872eed966e343835350175322d3.exe

.exe 282KB

2fa99872eed966e343835350175322d3.exe

IMPHASH 4089a35c9e048a4d2101826d92d4e0df
SHA256 d7d0246b912af8d5287d7f6c170bbc135384faed0777308410040e4e64d214d5
MD5 2fa99872eed966e343835350175322d3
SHA1 21d68cf41e7c328907644d3890df04442c24df90
SHA512 ea2f2c3f6029eacc2771d1f850bac06dfaa93c1cff0da0597cbc427d321de3528276db38889d37c0b4c2aa97cb1ac27b7267a0a737b4d2dfa616dc23cf2dffd8
SSDEEP 6144:p0+ULHbDHh66tunpynsRgNXirU1penHoH:pfULHJ8XRgYAeI
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20381

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement WaitNamedPipeA GetCurrentProcess SetMailslotInfo GetModuleHandleW GetTickCount SetFileTime GlobalAlloc GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemPowerStatus FreeConsole GetCalendarInfoA GetFileAttributesA GetVolumePathNameA GetShortPathNameA DeleteFiber GetProcAddress MoveFileW SetComputerNameA EnterCriticalSection SearchPathA GetConsoleAliasExesLengthA WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue FindFirstVolumeMountPointW BeginUpdateResourceA GetDiskFreeSpaceA AddAtomA GetPrivateProfileStructA FindNextFileA GetModuleHandleA OpenFileMappingW FreeEnvironmentStringsW GetCurrentDirectoryA GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask GetVolumeNameForVolumeMountPointW EnumCalendarInfoExA EnumSystemLocalesW DeleteFileA SetProcessAffinityMask ExitProcess GetLastError MoveFileA MultiByteToWideChar GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException HeapAlloc HeapFree IsProcessorFeaturePresent EncodePointer DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection CloseHandle WriteFile GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind SetStdHandle FlushFileBuffers HeapSize HeapReAlloc WriteConsoleW CreateFileW

gdi32

SelectPalette GetCharABCWidthsA

Sharing