edbc697da2627b9bbb6ac36ce3ff4473[.]exe

General

Target
edbc697da2627b9bbb6ac36ce3ff4473.exe
Size 352KB
Sample230622-mnsp1afc2v
SHA256 afaa0cde6c466dd1943a52fe9e4ea16f718c2a4e061f82219d840ce173b7e4dc
MD5 edbc697da2627b9bbb6ac36ce3ff4473
SHA1 c94c291a3640468bf24b47f8a7e3e97f2212da56
SHA512 391b5f5f863a40f2481aae60c9ca99c2b86bbe02fbd4fea94e4f7a6e8d897d069c1faaebe33b7ac9aa893ad37f533029b1f8e1ae33c6aea935f1f920509fe4a6
SSDEEP 6144:0nyvJ+VRwhhCL9uZbD/udqOLRXv6D6IFg3cT:d+VGfCLs/udHRXv6eIo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edbc697da2627b9bbb6ac36ce3ff4473.exe

File Explorer

edbc697da2627b9bbb6ac36ce3ff4473.exe

.exe 352KB

edbc697da2627b9bbb6ac36ce3ff4473.exe

IMPHASH 89980fe063a1b2bc0b7b32e49a2c9e4d
SHA256 afaa0cde6c466dd1943a52fe9e4ea16f718c2a4e061f82219d840ce173b7e4dc
MD5 edbc697da2627b9bbb6ac36ce3ff4473
SHA1 c94c291a3640468bf24b47f8a7e3e97f2212da56
SHA512 391b5f5f863a40f2481aae60c9ca99c2b86bbe02fbd4fea94e4f7a6e8d897d069c1faaebe33b7ac9aa893ad37f533029b1f8e1ae33c6aea935f1f920509fe4a6
SSDEEP 6144:0nyvJ+VRwhhCL9uZbD/udqOLRXv6D6IFg3cT:d+VGfCLs/udHRXv6eIo
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32396

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceW ClearCommError InterlockedDecrement GetLogicalDriveStringsW GetComputerNameW OpenSemaphoreA LockFile GetTickCount GetCommConfig GetConsoleAliasesA ReadConsoleW FormatMessageA GetWindowsDirectoryA FindResourceExA GlobalAlloc IsValidLocale FatalAppExitW GetSystemWindowsDirectoryA WriteConsoleW GetModuleFileNameW GetCompressedFileSizeA GetACP GetVolumePathNameA ReleaseSemaphore ReplaceFileA GetStringTypeExA VerifyVersionInfoW GetConsoleAliasesW GetProfileIntA VirtualQuery GetProcAddress VirtualAlloc BeginUpdateResourceW MoveFileW SetThreadPriorityBoost LoadLibraryA OpenMutexA DeleteTimerQueue CreateFileMappingW AddVectoredExceptionHandler SetCurrentDirectoryW BeginUpdateResourceA PurgeComm GetCurrentDirectoryA ScrollConsoleScreenBufferA GetVersionExA ReadConsoleInputW TlsAlloc FindFirstVolumeW GetCurrentProcessId CompareStringW CompareStringA CreateFileA SetStdHandle GetConsoleOutputCP WriteConsoleA CloseHandle FlushFileBuffers EnumCalendarInfoA SetFilePointer CreateMutexW GetLastError GetVolumeNameForVolumeMountPointA InterlockedIncrement Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree RtlUnwind RaiseException HeapAlloc GetModuleHandleW TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetConsoleCtrlHandler FatalAppExitA HeapReAlloc GetCPInfo GetTimeFormatA GetDateFormatA GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA GetStringTypeA MultiByteToWideChar GetStringTypeW FreeLibrary InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetTimeZoneInformation GetLocaleInfoW GetConsoleCP GetConsoleMode SetEnvironmentVariableA

user32

CharToOemBuffA CharUpperBuffA LoadMenuW GetCaretPos GetSysColorBrush SetCaretPos GetClipboardOwner

gdi32

GetPolyFillMode

advapi32

ReadEventLogW ReportEventW

Sharing