307328a2a382c7667df5c2d974054cf6[.]exe

General

Target
307328a2a382c7667df5c2d974054cf6.exe
Size 1.2MB
Sample230712-w2lnaaec87
SHA256 565f27efbfaabc879f74e800abdb63f4ad46d49b654927a551a8a6cd17be5ac1
MD5 307328a2a382c7667df5c2d974054cf6
SHA1 8ad62d1c4dcb1f631b0a166edab404cd49f4433e
SHA512 90ef22173e370f0ef16d8b8f84644ad856ceaab4db24da2dcebdb87447f4b71911b0f5047f8afe99ff1479c60d7628a71b38635e9206d4ee915856053e7974af
SSDEEP 24576:cCwBr0yQg0PjUfLyEnwmMoUtKYP6dQ/AiFiarggps3MBs1F:zZ/pOMBs1F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
307328a2a382c7667df5c2d974054cf6.exe

File Explorer

307328a2a382c7667df5c2d974054cf6.exe

.exe 1.2MB

307328a2a382c7667df5c2d974054cf6.exe

IMPHASH 605259136e2638d5fce505c3c61f621d
SHA256 565f27efbfaabc879f74e800abdb63f4ad46d49b654927a551a8a6cd17be5ac1
MD5 307328a2a382c7667df5c2d974054cf6
SHA1 8ad62d1c4dcb1f631b0a166edab404cd49f4433e
SHA512 90ef22173e370f0ef16d8b8f84644ad856ceaab4db24da2dcebdb87447f4b71911b0f5047f8afe99ff1479c60d7628a71b38635e9206d4ee915856053e7974af
SSDEEP 24576:cCwBr0yQg0PjUfLyEnwmMoUtKYP6dQ/AiFiarggps3MBs1F:zZ/pOMBs1F
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

931280

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CryptAcquireContextW CryptReleaseContext CryptDeriveKey CryptDestroyKey CryptDecrypt CryptCreateHash CryptHashData CryptDestroyHash

kernel32

CloseHandle DuplicateHandle WaitForSingleObjectEx Sleep GetCurrentProcess SwitchToThread GetCurrentThread GetCurrentThreadId GetExitCodeThread EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection QueryPerformanceCounter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress GetLastError WideCharToMultiByte GetCurrentProcessId InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess CreateTimerQueue SetEvent SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait EncodePointer GetThreadTimes FreeLibrary FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualAlloc VirtualProtect VirtualFree ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx LoadLibraryW DecodePointer RtlUnwindEx RtlPcToFileHeader RaiseException ExitThread GetModuleHandleExW GetStdHandle WriteFile ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile ReadConsoleW SetFilePointerEx HeapSize HeapReAlloc CreateFileW WriteConsoleW RtlUnwind

Sharing