1b219fbbce4b5b3f6723bce5a4dc73e2[.]exe

General

Target
1b219fbbce4b5b3f6723bce5a4dc73e2.exe
Size 231KB
Sample230708-j6pjhsda77
SHA256 57058dda63d287fb506d12c043fe1eb07abcaacb703fb2f8120edefb815bd1a8
MD5 1b219fbbce4b5b3f6723bce5a4dc73e2
SHA1 e5d2f6dc1c7d48595638e97742a5dc0454e49524
SHA512 2e45e8903a93044f4005f60de4bc841eb119866c1d90c195dee1838ab4cde74d3a33eaf3793233c68d95f6f0f22face8e06c538db4bb354237035f81f1269770
SSDEEP 3072:Qbx2Y5XCnOpMMZUwgXkEeiFgJksKvHF4iHK0W+NgVaUJIRZeI/D:KNcnWMFn9eiPHvHF4gdFGVnD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b219fbbce4b5b3f6723bce5a4dc73e2.exe

File Explorer

1b219fbbce4b5b3f6723bce5a4dc73e2.exe

.exe 231KB

1b219fbbce4b5b3f6723bce5a4dc73e2.exe

IMPHASH e65c47fc4d58d13cecab4f956a741e17
SHA256 57058dda63d287fb506d12c043fe1eb07abcaacb703fb2f8120edefb815bd1a8
MD5 1b219fbbce4b5b3f6723bce5a4dc73e2
SHA1 e5d2f6dc1c7d48595638e97742a5dc0454e49524
SHA512 2e45e8903a93044f4005f60de4bc841eb119866c1d90c195dee1838ab4cde74d3a33eaf3793233c68d95f6f0f22face8e06c538db4bb354237035f81f1269770
SSDEEP 3072:Qbx2Y5XCnOpMMZUwgXkEeiFgJksKvHF4iHK0W+NgVaUJIRZeI/D:KNcnWMFn9eiPHvHF4gdFGVnD
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22219

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetCommandLineW CreateMutexW WriteConsoleInputW lstrcpynA BuildCommDCBAndTimeoutsA HeapAlloc DeleteVolumeMountPointA InterlockedIncrement OpenJobObjectA GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA GetConsoleAliasExesW WaitNamedPipeW GetPriorityClass GetVolumePathNameW ActivateActCtx GetPrivateProfileIntA SetFileShortNameW _hread GetCalendarInfoW FreeConsole CreateEventA GetConsoleWindow GetConsoleAliasExesLengthW GetFileAttributesA WriteConsoleW IsDBCSLeadByte GetCompressedFileSizeA QueryInformationJobObject GetACP lstrlenW FindNextVolumeMountPointW GetShortPathNameA GetNamedPipeHandleStateW EnumSystemLocalesA GetPrivateProfileIntW DeleteFiber SetLastError ReadConsoleOutputCharacterA GetProcAddress HeapSize MoveFileW RemoveDirectoryA SetComputerNameA EnterCriticalSection LoadLibraryA Process32FirstW CreateSemaphoreW OpenWaitableTimerW LocalAlloc GetFileType AddAtomW CreateIoCompletionPort _lread GetModuleHandleA IsDebuggerPresent FreeEnvironmentStringsW FindNextFileW GetStringTypeW GetCurrentDirectoryA EnumDateFormatsW SetCalendarInfoA GetVersionExA ReadConsoleInputW FileTimeToLocalFileTime DeleteFileA lstrcpyA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree RtlUnwind GetCPInfo GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess ExitProcess SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount CloseHandle RaiseException WriteFile GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW HeapReAlloc LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers CreateFileW

Sharing