dffd68a69fd2db50b794570ed27fb97b[.]exe

General

Target
dffd68a69fd2db50b794570ed27fb97b.exe
Size 329KB
Sample230708-j811bsda88
SHA256 c60d7dbb56c7ee282684d03a3665b50ed66037631677cf5afb53fccd18e2bca7
MD5 dffd68a69fd2db50b794570ed27fb97b
SHA1 871e2cabfa9ee3f373cf6384d924defae9c8ee28
SHA512 8e4ce88f24058d08d4fb6df82c1d54fc20c23a38a705e9b9417a3279fe3c2e8df458945c457b2b67c90f01f39ad7ed953734d930ea009f063fd5330251a3eb76
SSDEEP 6144:ZjiviRgpWY7hXPY96MRlcP3Zq1Tr1BMETeRSiV8:IviRi7h/YlcP3Idr1+/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dffd68a69fd2db50b794570ed27fb97b.exe

File Explorer

dffd68a69fd2db50b794570ed27fb97b.exe

.exe 329KB

dffd68a69fd2db50b794570ed27fb97b.exe

IMPHASH a3379891e0a70ba0e75245a8c06c72cc
SHA256 c60d7dbb56c7ee282684d03a3665b50ed66037631677cf5afb53fccd18e2bca7
MD5 dffd68a69fd2db50b794570ed27fb97b
SHA1 871e2cabfa9ee3f373cf6384d924defae9c8ee28
SHA512 8e4ce88f24058d08d4fb6df82c1d54fc20c23a38a705e9b9417a3279fe3c2e8df458945c457b2b67c90f01f39ad7ed953734d930ea009f063fd5330251a3eb76
SSDEEP 6144:ZjiviRgpWY7hXPY96MRlcP3Zq1Tr1BMETeRSiV8:IviRi7h/YlcP3Idr1+/
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22427

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetCommandLineW CreateMutexW WriteConsoleInputW lstrcpynA BuildCommDCBAndTimeoutsA HeapAlloc DeleteVolumeMountPointA InterlockedIncrement GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA GetConsoleAliasExesW WaitNamedPipeW GetPriorityClass GetVolumePathNameW ActivateActCtx GetPrivateProfileIntA SetFileShortNameW _hread GetCalendarInfoW FreeConsole CreateEventA GetConsoleWindow GetConsoleAliasExesLengthW GetFileAttributesA WriteConsoleW IsDBCSLeadByte GetCompressedFileSizeA QueryInformationJobObject GetACP lstrlenW FindNextVolumeMountPointW GetShortPathNameA GetNamedPipeHandleStateW EnumSystemLocalesA GetPrivateProfileIntW DeleteFiber SetLastError ReadConsoleOutputCharacterA GetProcAddress HeapSize MoveFileW RemoveDirectoryA SetComputerNameA EnterCriticalSection LoadLibraryA Process32FirstW CreateSemaphoreW OpenWaitableTimerW LocalAlloc GetFileType AddAtomA OpenJobObjectW EnumDateFormatsA CreateIoCompletionPort _lread GetModuleHandleA IsDebuggerPresent FreeEnvironmentStringsW FindNextFileW GetStringTypeW GetCurrentDirectoryA SetCalendarInfoA GetVersionExA ReadConsoleInputW FileTimeToLocalFileTime DeleteFileA lstrcpyA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree RtlUnwind GetCPInfo GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess ExitProcess SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount CloseHandle RaiseException WriteFile GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW HeapReAlloc LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers CreateFileW

Sharing