ad5c172038139eb89a57498fea180f04[.]exe

General

Target
ad5c172038139eb89a57498fea180f04.exe
Size 287KB
Sample230626-g3etsshf9t
SHA256 d40b6207060d675815f252a2b399ce76458294bc51e39e675e91a6229a41b1e0
MD5 ad5c172038139eb89a57498fea180f04
SHA1 9af768ebd406c951790987ec19a38326316f3be7
SHA512 45a596ddaa726a61a0a83be287665c896d37e8ed8f78b1566dcdd3ef107a625efeb6d802a64b974088915c180cb1a35407ffc7d7ec4cfd671cfe994ac151f6a5
SSDEEP 6144:sRAT0tT+4k555555qKQYOZr56CR+ddfZxcvFKkxP5QbU6:su0tT+45SfUhxP5O
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5c172038139eb89a57498fea180f04.exe

File Explorer

ad5c172038139eb89a57498fea180f04.exe

.exe 287KB

ad5c172038139eb89a57498fea180f04.exe

IMPHASH 4527c8db200cf9545daac89557b3bc37
SHA256 d40b6207060d675815f252a2b399ce76458294bc51e39e675e91a6229a41b1e0
MD5 ad5c172038139eb89a57498fea180f04
SHA1 9af768ebd406c951790987ec19a38326316f3be7
SHA512 45a596ddaa726a61a0a83be287665c896d37e8ed8f78b1566dcdd3ef107a625efeb6d802a64b974088915c180cb1a35407ffc7d7ec4cfd671cfe994ac151f6a5
SSDEEP 6144:sRAT0tT+4k555555qKQYOZr56CR+ddfZxcvFKkxP5QbU6:su0tT+45SfUhxP5O
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21842

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempFileNameW GetPrivateProfileSectionNamesW SearchPathW SetPriorityClass GetConsoleAliasesLengthW InterlockedIncrement InterlockedDecrement WaitNamedPipeA GetModuleHandleW GetTickCount GetCurrentThread FindNextVolumeMountPointA ConvertFiberToThread GetNumberFormatA EnumTimeFormatsW GetCommandLineA GetVolumePathNameW GlobalAlloc LoadLibraryW FreeConsole GetCalendarInfoA GetConsoleAliasExesLengthW LeaveCriticalSection GetExitCodeProcess GetFileAttributesW WriteConsoleW GetCompressedFileSizeA CompareStringW GetVolumePathNameA FindNextVolumeMountPointW EnumSystemLocalesA GetLastError GetCurrentDirectoryW GetProcAddress BeginUpdateResourceW MoveFileW SearchPathA SetFileAttributesA GlobalFree OpenWaitableTimerA LoadLibraryA OpenThread InterlockedExchangeAdd SetCalendarInfoW MoveFileA VirtualLock AddAtomA HeapWalk OpenJobObjectW EnumDateFormatsA OpenFileMappingW FreeEnvironmentStringsW FindNextFileW CreateMailslotA WaitForDebugEvent GetCPInfoExA GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW GetFileInformationByHandle ReadConsoleOutputCharacterW LocalFileTimeToFileTime ReadFile CreateFileW WideCharToMultiByte MultiByteToWideChar HeapSetInformation GetStartupInfoW RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection SetFilePointer CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetStringTypeW Sleep RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize HeapReAlloc

user32

GetAltTabInfoW

Sharing