b9dbddba63e0ab925c21c4e9e7aecdc7[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b9dbddba63e0ab925c21c4e9e7aecdc7.exe
Size 379KB
Sample230630-284qbsfa45
SHA256 64365156896ff3b41790a7b0dd38bf1efb985a4e5e35135883b34ea69a85b508
MD5 b9dbddba63e0ab925c21c4e9e7aecdc7
SHA1 13724bfbb505f85693606280dafe3ff749372ac8
SHA512 02ca5bce25a943ec3d4057ad4a06a037788b90eafdfec5a60b2fe79f8eb2e89cbb390ac322d9b0c33ae07379524d09bd3811ac07519bf8fc5e7248c048cb5009
SSDEEP 6144:qWXVGmfa9s2Kk0hxeQQBr865/i/X3L6PyT:BFGmfa9nVw6l23L6PC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dbddba63e0ab925c21c4e9e7aecdc7.exe

File Explorer

b9dbddba63e0ab925c21c4e9e7aecdc7.exe

.exe 379KB

b9dbddba63e0ab925c21c4e9e7aecdc7.exe

IMPHASH c1f59b5b7783d7b87e622c768d615c9e
SHA256 64365156896ff3b41790a7b0dd38bf1efb985a4e5e35135883b34ea69a85b508
MD5 b9dbddba63e0ab925c21c4e9e7aecdc7
SHA1 13724bfbb505f85693606280dafe3ff749372ac8
SHA512 02ca5bce25a943ec3d4057ad4a06a037788b90eafdfec5a60b2fe79f8eb2e89cbb390ac322d9b0c33ae07379524d09bd3811ac07519bf8fc5e7248c048cb5009
SSDEEP 6144:qWXVGmfa9s2Kk0hxeQQBr865/i/X3L6PyT:BFGmfa9nVw6l23L6PC
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17007

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA EnumDateFormatsExW VirtualQuery GetProfileIntW FindResourceExW DeleteVolumeMountPointA ReadConsoleA UnlockFile SetCommBreak GetModuleHandleW GetTickCount EscapeCommFunction FormatMessageA GetCompressedFileSizeW ClearCommBreak GetDateFormatA TlsSetValue GlobalAlloc CopyFileW GetSystemWindowsDirectoryA GetStringTypeExW FindNextVolumeW ReplaceFileW GetVolumePathNameA GetDevicePowerState ReleaseSemaphore SetLocaleInfoA SetCurrentDirectoryA GetLogicalDriveStringsA OpenMutexW GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BeginUpdateResourceW CreateMemoryResourceNotification LoadLibraryA CreateHardLinkW BeginUpdateResourceA SetProcessWorkingSetSize ReadConsoleInputW GetWindowsDirectoryW CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle SetFilePointer CreateMutexW GetConsoleAliasesW FlushFileBuffers GetConsoleMode InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind RaiseException HeapAlloc HeapCreate VirtualFree VirtualAlloc HeapReAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP

user32

SetCaretPos CharToOemBuffA DdeCreateStringHandleA GetMenuBarInfo LoadMenuA CharUpperBuffA GetSysColorBrush DdeQueryStringA

gdi32

GetCharABCWidthsI

advapi32

InitializeAcl

winhttp

WinHttpReadData