a2013cfe8484dbf0ff43dda5fa838bec[.]exe

General

Target
a2013cfe8484dbf0ff43dda5fa838bec.exe
Size 398KB
Sample230627-wvv85sfa76
SHA256 e2f75ca08fa958f8a4fa25f2e0e76cf63f6af45bcff1166fa67f4b2e561f9bbb
MD5 a2013cfe8484dbf0ff43dda5fa838bec
SHA1 7e64a56daeae7a52fbca2f03bef2274af7b8c957
SHA512 75733f85e01f7c06a6879bf84910def06719acc930789f4fcd55707a5aa9019fefb2a5bf4ec1a0ab0d8133a2d46887f89296b887338d1a82ccac1254f085d4de
SSDEEP 6144:wIgxHtB8mOQzCA+7Z8EdYM6gkEGwDb98QzTy16XJ:w3NB8mBB+F8EdYbqb2AJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2013cfe8484dbf0ff43dda5fa838bec.exe

File Explorer

a2013cfe8484dbf0ff43dda5fa838bec.exe

.exe 398KB

a2013cfe8484dbf0ff43dda5fa838bec.exe

IMPHASH 435e7ef59b3c6347cf62e2c58eef72c0
SHA256 e2f75ca08fa958f8a4fa25f2e0e76cf63f6af45bcff1166fa67f4b2e561f9bbb
MD5 a2013cfe8484dbf0ff43dda5fa838bec
SHA1 7e64a56daeae7a52fbca2f03bef2274af7b8c957
SHA512 75733f85e01f7c06a6879bf84910def06719acc930789f4fcd55707a5aa9019fefb2a5bf4ec1a0ab0d8133a2d46887f89296b887338d1a82ccac1254f085d4de
SSDEEP 6144:wIgxHtB8mOQzCA+7Z8EdYM6gkEGwDb98QzTy16XJ:w3NB8mBB+F8EdYbqb2AJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22710

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW SearchPathW GetConsoleAliasesLengthW InterlockedIncrement OpenJobObjectA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA FreeEnvironmentStringsA GetTickCount GetCurrentThread ConvertFiberToThread EnumTimeFormatsW GetCommandLineA GetPriorityClass GlobalAlloc LoadLibraryW FreeConsole GetCalendarInfoA GetConsoleAliasExesLengthW LeaveCriticalSection CreateSemaphoreA GetFileAttributesW WriteConsoleW GetCompressedFileSizeA GetVolumePathNameA CreateMailslotW EnumSystemLocalesA InterlockedExchange GetCPInfoExW GetLastError GetCurrentDirectoryW GetProcAddress BeginUpdateResourceW MoveFileW GlobalGetAtomNameA SearchPathA GlobalFree GetTempFileNameA OpenWaitableTimerA LoadLibraryA OpenThread SetCalendarInfoW GetNumberFormatW VirtualLock AddAtomA HeapWalk OpenJobObjectW FindNextFileA EnumDateFormatsA GetModuleHandleA GetCurrentDirectoryA CompareStringA WaitForDebugEvent GetShortPathNameW GetCPInfoExA SetFileShortNameA GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW GetFileInformationByHandle ReadConsoleOutputCharacterW OpenFileMappingA LocalFileTimeToFileTime CloseHandle CreateFileW MoveFileA WideCharToMultiByte MultiByteToWideChar HeapReAlloc HeapSetInformation GetStartupInfoW RaiseException HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId HeapCreate SetFilePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind LCMapStringW GetStringTypeW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize ReadFile

user32

GetAltTabInfoA

Sharing