4786f469607fd300faaafba096d2c09f[.]exe

General

Target
4786f469607fd300faaafba096d2c09f.exe
Size 334KB
Sample230623-slqqhsfe93
SHA256 7a6aa35deed2fac5dcad730ab3591efb8f28a82312bf77d5b18a1b34381d9ffe
MD5 4786f469607fd300faaafba096d2c09f
SHA1 48360e75345b73d3f85c91b66417e791c8102507
SHA512 210e343ebfd90ec6b28119948d6d241138d2da1d043138b3b6dea215669ed97982a217d35538619db09c5fb0febcb59d6063a6ae697a7bdd0d455b4b71ba738a
SSDEEP 6144:Ug9O9/oO0Nk8sG7oB3OFed8MrA/eq5CiRAY:Ueo/ofa8sG7oNOY9kYiR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4786f469607fd300faaafba096d2c09f.exe

File Explorer

4786f469607fd300faaafba096d2c09f.exe

.exe 334KB

4786f469607fd300faaafba096d2c09f.exe

IMPHASH 3d932c8387f734b87492e5f8d5c5a08c
SHA256 7a6aa35deed2fac5dcad730ab3591efb8f28a82312bf77d5b18a1b34381d9ffe
MD5 4786f469607fd300faaafba096d2c09f
SHA1 48360e75345b73d3f85c91b66417e791c8102507
SHA512 210e343ebfd90ec6b28119948d6d241138d2da1d043138b3b6dea215669ed97982a217d35538619db09c5fb0febcb59d6063a6ae697a7bdd0d455b4b71ba738a
SSDEEP 6144:Ug9O9/oO0Nk8sG7oB3OFed8MrA/eq5CiRAY:Ueo/ofa8sG7oNOY9kYiR
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23315

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetCommandLineW SearchPathW SetPriorityClass GetDriveTypeW GetConsoleAliasExesLengthA InterlockedIncrement InterlockedDecrement GlobalSize SetComputerNameW GetModuleHandleW GetTickCount GetCurrentThread EnumCalendarInfoExW FindNextVolumeMountPointA GetNumberFormatA WaitNamedPipeW EnumTimeFormatsA GlobalAlloc GetPrivateProfileStructW GetSystemPowerStatus FreeConsole GetExitCodeProcess GetFileAttributesW WriteConsoleW GetVolumePathNameA FindNextVolumeMountPointW GetShortPathNameA ReleaseActCtx GetCPInfoExW GetLastError GetCurrentDirectoryW GetProcAddress MoveFileW EnterCriticalSection SetFileAttributesA GetTempFileNameA LoadLibraryA OpenThread InterlockedExchangeAdd OpenWaitableTimerW SetCalendarInfoW MoveFileA AddAtomW OpenJobObjectW GetModuleHandleA OpenFileMappingW FreeEnvironmentStringsW FindNextFileW CreateMailslotA CompareStringA SetFileShortNameA DeleteFileW GetCurrentProcessId EnumSystemLocalesW HeapReAlloc LoadLibraryW WideCharToMultiByte DeleteFileA MultiByteToWideChar GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc HeapFree IsProcessorFeaturePresent LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer CloseHandle ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep GetConsoleCP GetConsoleMode RtlUnwind SetStdHandle FlushFileBuffers HeapSize CreateFileW

user32

GetListBoxInfo

Sharing