ae4c66cd3c6db9a0d78b4b151e2ac1a2[.]exe

General

Target
ae4c66cd3c6db9a0d78b4b151e2ac1a2.exe
Size 471KB
Sample230717-q34mlacc69
SHA256 2666bc8583d2fb41a96376ab46c4b96ddc676e4187ca510b977740a5fa8a4fe0
MD5 ae4c66cd3c6db9a0d78b4b151e2ac1a2
SHA1 ade1144a4c13668203c25d78a0963f9385a38075
SHA512 ae8ba4ed1def09b019ee1dac0e5cca4b603e93b94691730dadc68e6f471aac9a9a6807c9aed67f0b5256561b06afca0ae8c0f96634af03a1d46637c5146d8df7
SSDEEP 6144:3ATBSIM/m/cZfQiB2d6ytmhE9h+HJMPcboNAjqIjxFyx0Be2oR:QNSIz4dy8qCscbonIVF/BevR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae4c66cd3c6db9a0d78b4b151e2ac1a2.exe

File Explorer

ae4c66cd3c6db9a0d78b4b151e2ac1a2.exe

.exe 471KB

ae4c66cd3c6db9a0d78b4b151e2ac1a2.exe

IMPHASH c1faaafeea493fa6a83d7c193e85adf1
SHA256 2666bc8583d2fb41a96376ab46c4b96ddc676e4187ca510b977740a5fa8a4fe0
MD5 ae4c66cd3c6db9a0d78b4b151e2ac1a2
SHA1 ade1144a4c13668203c25d78a0963f9385a38075
SHA512 ae8ba4ed1def09b019ee1dac0e5cca4b603e93b94691730dadc68e6f471aac9a9a6807c9aed67f0b5256561b06afca0ae8c0f96634af03a1d46637c5146d8df7
SSDEEP 6144:3ATBSIM/m/cZfQiB2d6ytmhE9h+HJMPcboNAjqIjxFyx0Be2oR:QNSIz4dy8qCscbonIVF/BevR
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22671

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetInformationJobObject GetConsoleAliasExesA MoveFileExA AllocConsole _llseek lstrcpynA BuildCommDCBAndTimeoutsA DeleteVolumeMountPointA InterlockedIncrement ReadConsoleA InterlockedDecrement GetNamedPipeHandleStateA HeapFree GetProfileStringW GetComputerNameW BackupSeek _lclose GetModuleHandleW FindNextVolumeMountPointA GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA GetCompressedFileSizeW WaitNamedPipeW GetUserDefaultLangID InitializeCriticalSection GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW LoadLibraryW FatalAppExitW ReadConsoleInputA GetConsoleAliasExesLengthW GetVersionExW GetStringTypeExW GetOverlappedResult GetVolumePathNameA lstrlenW GetPrivateProfileSectionNamesW GetShortPathNameA EnumSystemLocalesA GetPrivateProfileIntW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress MoveFileW OpenWaitableTimerA CreateSemaphoreW LocalAlloc SetCalendarInfoW GetFileType MoveFileA AddAtomW RemoveDirectoryW FoldStringW FindNextFileA _lread GetModuleHandleA FreeEnvironmentStringsW GetCurrentDirectoryA EnumDateFormatsW PeekConsoleInputA GetShortPathNameW SetFileShortNameA ReadConsoleInputW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DeleteFileW GetFileInformationByHandle GetConsoleProcessList ReadConsoleOutputCharacterW EnumSystemLocalesW lstrcpyA FlushFileBuffers CloseHandle CreateFileW GetCommandLineW Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer WideCharToMultiByte HeapAlloc MultiByteToWideChar HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize RaiseException GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode LCMapStringW SetStdHandle WriteConsoleW DeleteFileA

user32

CharUpperW CharUpperBuffW

gdi32

GetCharWidthFloatA

Sharing