c86be0608ca0a4b00158a845db672d6c[.]exe

General

Target
c86be0608ca0a4b00158a845db672d6c.exe
Size 402KB
Sample230629-klez1sce33
SHA256 d7876da2f3ee12e4ae320e63b19ea683ac2f2f149add5df44daa876d3988e1c4
MD5 c86be0608ca0a4b00158a845db672d6c
SHA1 ffe713b1baa73ca65e7c2a9b88b471f715308526
SHA512 1c8b3ed28f3a28f60507cfe24425cfcc6d062e1ea2d1aeb6ca0f55d43f9eb88fb59543bdbe8a3ea26e1527aa3fd62e939552984ab11ceaa4630c8b898269640c
SSDEEP 6144:5HllgV77zjFlc/GcI8Xd8vnX+OqO74VQGjbWCfIewt0HNRCrMXsLcH:5Hllw7zjFlWGclQOn1VQsbZRwtERBXq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c86be0608ca0a4b00158a845db672d6c.exe

File Explorer

c86be0608ca0a4b00158a845db672d6c.exe

.exe 402KB

c86be0608ca0a4b00158a845db672d6c.exe

IMPHASH c61bedf317f19d715278ea485f1b5899
SHA256 d7876da2f3ee12e4ae320e63b19ea683ac2f2f149add5df44daa876d3988e1c4
MD5 c86be0608ca0a4b00158a845db672d6c
SHA1 ffe713b1baa73ca65e7c2a9b88b471f715308526
SHA512 1c8b3ed28f3a28f60507cfe24425cfcc6d062e1ea2d1aeb6ca0f55d43f9eb88fb59543bdbe8a3ea26e1527aa3fd62e939552984ab11ceaa4630c8b898269640c
SSDEEP 6144:5HllgV77zjFlc/GcI8Xd8vnX+OqO74VQGjbWCfIewt0HNRCrMXsLcH:5Hllw7zjFlWGclQOn1VQsbZRwtERBXq
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27379

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW AllocConsole ConvertThreadToFiber GetConsoleAliasExesLengthA InterlockedIncrement OpenJobObjectA InterlockedDecrement WriteConsoleInputA FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetCurrentThread WaitNamedPipeW EnumTimeFormatsA GetCommandLineA GetPriorityClass GetVolumePathNameW GlobalAlloc SetFileShortNameW GetCalendarInfoA LeaveCriticalSection CreateSemaphoreA GetFileAttributesW WriteConsoleW GetCompressedFileSizeA GetVolumePathNameA CreateMailslotW GetCPInfoExW GetCurrentDirectoryW SetLastError GetProcAddress MoveFileW SearchPathW SearchPathA GlobalFree GetTempFileNameA OpenWaitableTimerA LoadLibraryA OpenThread InterlockedExchangeAdd SetCalendarInfoW GetNumberFormatW BeginUpdateResourceA VirtualLock AddAtomA HeapWalk GetPrivateProfileSectionNamesA FindNextFileA EnumDateFormatsA GetModuleHandleA GetStringTypeW GetCurrentDirectoryA CompareStringA WaitForDebugEvent GetShortPathNameW GetCPInfoExA GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW GetFileInformationByHandle ReadConsoleOutputCharacterW OpenFileMappingA LocalFileTimeToFileTime ReadFile HeapReAlloc GlobalGetAtomNameA CreateMutexW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection EncodePointer DecodePointer GetLastError MoveFileA WideCharToMultiByte MultiByteToWideChar HeapSetInformation GetStartupInfoW RaiseException HeapFree RtlUnwind HeapAlloc IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId SetFilePointer CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize LCMapStringW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW CreateFileW

user32

GetAltTabInfoA

advapi32

ReadEventLogW

Sharing