c8b2350c938a09a2f3a4b19b35cab18a[.]exe

General

Target
c8b2350c938a09a2f3a4b19b35cab18a.exe
Size 289KB
Sample230626-g2mg9agg28
SHA256 c26b024a48bbfa840d9dc983456367c1aeabe6c1323e8a0c19ba64754ac7c5b5
MD5 c8b2350c938a09a2f3a4b19b35cab18a
SHA1 203cab5f96a737a6ecb3664772c923790024a288
SHA512 da34e946d05d54ee8ec1fccda7938459faa5a4bb5cb877a2a10d42852b40ce48ff087facbe3375cf3cfebf20d13bd2f46bc67b06edaefc744ac1c42f64b419fd
SSDEEP 6144:ajbCnlqga0PUdYQxdAEMc+iQVcqP+OhHKyDkGpFk:aynlqgGdYCWjcNQSqP/KvGpF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8b2350c938a09a2f3a4b19b35cab18a.exe

File Explorer

c8b2350c938a09a2f3a4b19b35cab18a.exe

.exe 289KB

c8b2350c938a09a2f3a4b19b35cab18a.exe

IMPHASH 9a21fb86d7cb757e687d836e62cdc05e
SHA256 c26b024a48bbfa840d9dc983456367c1aeabe6c1323e8a0c19ba64754ac7c5b5
MD5 c8b2350c938a09a2f3a4b19b35cab18a
SHA1 203cab5f96a737a6ecb3664772c923790024a288
SHA512 da34e946d05d54ee8ec1fccda7938459faa5a4bb5cb877a2a10d42852b40ce48ff087facbe3375cf3cfebf20d13bd2f46bc67b06edaefc744ac1c42f64b419fd
SSDEEP 6144:ajbCnlqga0PUdYQxdAEMc+iQVcqP+OhHKyDkGpFk:aynlqgGdYCWjcNQSqP/KvGpF
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22646

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetTempFileNameW GetPrivateProfileSectionNamesW SearchPathW SetPriorityClass GetConsoleAliasesLengthW InterlockedIncrement InterlockedDecrement WaitNamedPipeA GetUserDefaultLCID GetModuleHandleW GetTickCount GetCurrentThread FindNextVolumeMountPointA ConvertFiberToThread GetNumberFormatA EnumTimeFormatsW GetCommandLineA GetVolumePathNameW GlobalAlloc LoadLibraryW FreeConsole GetCalendarInfoA GetConsoleAliasExesLengthW LeaveCriticalSection GetExitCodeProcess GetFileAttributesW WriteConsoleW CompareStringW FindNextVolumeMountPointW GetLastError GetCurrentDirectoryW GetProcAddress BeginUpdateResourceW MoveFileW SearchPathA SetFileAttributesA GlobalFree OpenWaitableTimerA LoadLibraryA OpenThread InterlockedExchangeAdd SetCalendarInfoW MoveFileA VirtualLock AddAtomA OpenJobObjectW EnumDateFormatsA OpenFileMappingW FreeEnvironmentStringsW FindNextFileW CreateMailslotA WaitForDebugEvent GetCPInfoExA GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW GetFileInformationByHandle ReadConsoleOutputCharacterW EnumSystemLocalesW DeleteFileA LocalFileTimeToFileTime ReadFile CreateFileW WideCharToMultiByte MultiByteToWideChar HeapSetInformation GetStartupInfoW RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection SetFilePointer CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize HeapReAlloc

user32

GetAltTabInfoW

Sharing