1b3b07b450ab413b9aa485ee89670d29[.]exe

General

Target
1b3b07b450ab413b9aa485ee89670d29.exe
Size 298KB
Sample230622-h8ddlaed2v
SHA256 1aebda8ec3beb39cf1cbd4a92ffe94bc6cd114c7b336b3ea6b8be5d183af731d
MD5 1b3b07b450ab413b9aa485ee89670d29
SHA1 28284fd759c31d95d1f5f6dd718ca78a9d77f0d2
SHA512 23cc9d2c4aedc98561851c4f16f0fe4e8912e8f98b4c698f1e38a92de00443cd77841b242ecbf1f95ef960d57ed0ef458d297f9fe4c500879edfde695c451544
SSDEEP 6144:+HpSwgQ33Xo/mLPizakvceDmggiOFxdhGRaBBMp6AG5Z:+JSwj3Qmejvz0FxD64BMIP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b3b07b450ab413b9aa485ee89670d29.exe

File Explorer

1b3b07b450ab413b9aa485ee89670d29.exe

.exe 298KB

1b3b07b450ab413b9aa485ee89670d29.exe

IMPHASH f4c1b2d985de83e8ff623844bdb73567
SHA256 1aebda8ec3beb39cf1cbd4a92ffe94bc6cd114c7b336b3ea6b8be5d183af731d
MD5 1b3b07b450ab413b9aa485ee89670d29
SHA1 28284fd759c31d95d1f5f6dd718ca78a9d77f0d2
SHA512 23cc9d2c4aedc98561851c4f16f0fe4e8912e8f98b4c698f1e38a92de00443cd77841b242ecbf1f95ef960d57ed0ef458d297f9fe4c500879edfde695c451544
SSDEEP 6144:+HpSwgQ33Xo/mLPizakvceDmggiOFxdhGRaBBMp6AG5Z:+JSwj3Qmejvz0FxD64BMIP
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21535

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW SetPriorityClass GetConsoleAliasExesLengthA InterlockedIncrement InterlockedDecrement GlobalSize FreeEnvironmentStringsA GetTickCount GetCurrentThread FindNextVolumeMountPointA GetWindowsDirectoryA WaitNamedPipeW EnumTimeFormatsA GlobalAlloc GetSystemDirectoryW SetFileShortNameW GetPrivateProfileStructW GetSystemPowerStatus GetCalendarInfoW FreeConsole GetFileAttributesA TerminateProcess GetVolumePathNameA FindNextVolumeMountPointW GetShortPathNameA ReleaseActCtx GetCPInfoExW GetLastError GetCurrentDirectoryW GetProcAddress BeginUpdateResourceW MoveFileW SetComputerNameA EnterCriticalSection SearchPathA SetFileAttributesA GetTempFileNameA LoadLibraryA OpenThread WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW SetCalendarInfoW MoveFileA GetNumberFormatW SetFileApisToANSI AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA CreateMailslotA CompareStringA GetShortPathNameW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId OpenFileMappingA EnumCalendarInfoExA EnumSystemLocalesW WriteConsoleW HeapReAlloc DeleteFileA MultiByteToWideChar GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException HeapAlloc HeapFree IsProcessorFeaturePresent EncodePointer DecodePointer GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection CloseHandle ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind SetStdHandle FlushFileBuffers HeapSize LoadLibraryW CreateFileW

user32

GetListBoxInfo

Sharing