a690e057602d61188317fc887553870e[.]exe

General

Target
a690e057602d61188317fc887553870e.exe
Size 233KB
Sample230709-dsfrkaaf56
SHA256 c5067403a8eddbfb4396e7bce5dbb929b841ae0f00622acd7063cbf4a38b9d8d
MD5 a690e057602d61188317fc887553870e
SHA1 795bbd8e63ede2c3e589d8c24f25147fd0c18126
SHA512 52eb5b12e08cebc594a39724fd077638df3668af51d80a074dcfd14474a04c9db90f13473b773a000e319d0f64453d9ffa994f1f0031be2075e8427420ee514d
SSDEEP 3072:AT4If4ta31cxDHaOLOxycywWRfjccAx/4:lftEM6OLNcyRfjx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a690e057602d61188317fc887553870e.exe

File Explorer

a690e057602d61188317fc887553870e.exe

.exe 233KB

a690e057602d61188317fc887553870e.exe

IMPHASH ad776f537988b97c36b2101a62f689be
SHA256 c5067403a8eddbfb4396e7bce5dbb929b841ae0f00622acd7063cbf4a38b9d8d
MD5 a690e057602d61188317fc887553870e
SHA1 795bbd8e63ede2c3e589d8c24f25147fd0c18126
SHA512 52eb5b12e08cebc594a39724fd077638df3668af51d80a074dcfd14474a04c9db90f13473b773a000e319d0f64453d9ffa994f1f0031be2075e8427420ee514d
SSDEEP 3072:AT4If4ta31cxDHaOLOxycywWRfjccAx/4:lftEM6OLNcyRfjx
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22699

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetCommandLineW CreateMutexW GetConsoleAliasesLengthW lstrcpynA BuildCommDCBAndTimeoutsA HeapAlloc DeleteVolumeMountPointA InterlockedIncrement OpenJobObjectA WriteConsoleInputA GetSystemDefaultLCID FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA GetCompressedFileSizeW GetConsoleAliasExesW WaitNamedPipeW GetVolumePathNameW ActivateActCtx GetPrivateProfileIntA SetFileShortNameW _hread FreeConsole GetCalendarInfoA CreateEventA GetConsoleWindow GetConsoleAliasExesLengthW GetFileAttributesW WriteConsoleW IsDBCSLeadByte QueryInformationJobObject lstrlenW FindNextVolumeMountPointW GetShortPathNameA GetNamedPipeHandleStateW EnumSystemLocalesA GetPrivateProfileIntW DeleteFiber GetLastError GetCurrentDirectoryW SetLastError ReadConsoleOutputCharacterA GetProcAddress HeapSize RemoveDirectoryA SetComputerNameA EnterCriticalSection LoadLibraryA CreateSemaphoreW OpenWaitableTimerW LocalAlloc SetCalendarInfoW GetFileType MoveFileA AddAtomW GetProfileStringA CreateIoCompletionPort _lread GetModuleHandleA IsDebuggerPresent FindNextFileW GetStringTypeW GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW GetVersionExA ReadConsoleInputW FindFirstVolumeW DeleteFileW MoveFileWithProgressW lstrcpyA FlushFileBuffers SetStdHandle InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EncodePointer DecodePointer DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess ExitProcess SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount CloseHandle RaiseException WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW HeapReAlloc LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode CreateFileW

user32

CharUpperBuffW

Sharing