56f1d5229254b5ce2c32216b7dbf0946[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
56f1d5229254b5ce2c32216b7dbf0946.exe
Size 380KB
Sample230701-eym89sfe67
SHA256 3d9868ef3b6c60ebe9ef766672923f57253ac74cd5bc2592e2d62bb984b5f95d
MD5 56f1d5229254b5ce2c32216b7dbf0946
SHA1 145e6efc41232e9fc3aff06636e7d91a7d4c0cd7
SHA512 99fccd2c44eabba9871ea4ef59534b94f0619401914cd30eac706386d7045d7a6c6740a1df5d298c3d03abb72f240df42aac1c108957d3887ab1af5c24403bfb
SSDEEP 6144:s2ZE2ctS8vMpstuenInc1BhXjY1qjguWl4fdF4yT:FASjwueIcVWEgu/dF4C
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56f1d5229254b5ce2c32216b7dbf0946.exe

File Explorer

56f1d5229254b5ce2c32216b7dbf0946.exe

.exe 380KB

56f1d5229254b5ce2c32216b7dbf0946.exe

IMPHASH 37146ea85ae0b616e18a34bdbcaf2cf8
SHA256 3d9868ef3b6c60ebe9ef766672923f57253ac74cd5bc2592e2d62bb984b5f95d
MD5 56f1d5229254b5ce2c32216b7dbf0946
SHA1 145e6efc41232e9fc3aff06636e7d91a7d4c0cd7
SHA512 99fccd2c44eabba9871ea4ef59534b94f0619401914cd30eac706386d7045d7a6c6740a1df5d298c3d03abb72f240df42aac1c108957d3887ab1af5c24403bfb
SSDEEP 6144:s2ZE2ctS8vMpstuenInc1BhXjY1qjguWl4fdF4yT:FASjwueIcVWEgu/dF4C
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17172

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA EnumCalendarInfoA VirtualQuery GetProfileIntW FindResourceExW DeleteVolumeMountPointA ReadConsoleA UnlockFile SetCommBreak GetModuleHandleW GetTickCount FormatMessageA GetCompressedFileSizeW ClearCommBreak GetDateFormatA TlsSetValue GlobalAlloc CopyFileW GetSystemWindowsDirectoryA GetStringTypeExW FindNextVolumeW ReplaceFileW GetVolumePathNameA GetDevicePowerState ReleaseSemaphore SetCurrentDirectoryA GetLogicalDriveStringsA OpenMutexW GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BeginUpdateResourceW EnumDateFormatsExA CreateMemoryResourceNotification LoadLibraryA CreateHardLinkW BeginUpdateResourceA SetProcessWorkingSetSize ReadConsoleInputW GetWindowsDirectoryW CloseHandle CreateFileA FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetupComm CreateMutexW GetConsoleAliasesW SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind RaiseException WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW

user32

SetCaretPos CharToOemBuffA DdeCreateStringHandleA GetMenuBarInfo LoadMenuA CharUpperBuffA DdeQueryStringA

gdi32

GetCharABCWidthsI

advapi32

InitializeAcl

winhttp

WinHttpReadData