8bb664eabc38ffd53505f7e7b072a662[.]exe

General

Target
8bb664eabc38ffd53505f7e7b072a662.exe
Size 338KB
Sample230719-v1emxaaf21
SHA256 5f1c7c05ef502fa4b2bb54351f0ae38a73d25d728e2aa370e739cced90aefb04
MD5 8bb664eabc38ffd53505f7e7b072a662
SHA1 ae84a9b0571b339dd74178dd2b5498421d9ad5e7
SHA512 e6eacf4bdf2d6942d89d2c75fd5874a5ff1871beb139ab250d029c7da830b286ef80776fb3cf8f4e41c7eb3cac405d4591f8df85b30db7be9e7acf5937f5f987
SSDEEP 6144:35BD31XA/l/qyl38yBOoqNLvxBc4pZ/IobPd:JBDBulBl38akvPHvb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb664eabc38ffd53505f7e7b072a662.exe

File Explorer

8bb664eabc38ffd53505f7e7b072a662.exe

.exe 338KB

8bb664eabc38ffd53505f7e7b072a662.exe

IMPHASH a2ee1db05d75ef9143c7e9fac4f021ad
SHA256 5f1c7c05ef502fa4b2bb54351f0ae38a73d25d728e2aa370e739cced90aefb04
MD5 8bb664eabc38ffd53505f7e7b072a662
SHA1 ae84a9b0571b339dd74178dd2b5498421d9ad5e7
SHA512 e6eacf4bdf2d6942d89d2c75fd5874a5ff1871beb139ab250d029c7da830b286ef80776fb3cf8f4e41c7eb3cac405d4591f8df85b30db7be9e7acf5937f5f987
SSDEEP 6144:35BD31XA/l/qyl38yBOoqNLvxBc4pZ/IobPd:JBDBulBl38akvPHvb
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21318

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

_llseek lstrcpynA GetConsoleAliasExesLengthA DeleteVolumeMountPointA InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateA GetUserDefaultLCID OpenSemaphoreA BackupSeek _lclose GetModuleHandleW GetConsoleAliasesLengthA GetNumberFormatA ReadConsoleW GetWindowsDirectoryA WaitNamedPipeW GetUserDefaultLangID GetCommandLineA GetVolumePathNameW GlobalAlloc GetPrivateProfileIntA SetFileShortNameW LoadLibraryW FatalAppExitW GetPrivateProfileStructW GetVersionExW SetConsoleCursorPosition GetCompressedFileSizeA GetOverlappedResult lstrlenW GetShortPathNameA GetPrivateProfileIntW GetLastError AllocConsole GetProcAddress HeapSize MoveFileW RemoveDirectoryA EnterCriticalSection OpenWaitableTimerA LocalAlloc GetFileType BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW GetProfileStringA AddAtomA FoldStringA FindNextFileA EnumDateFormatsA _lread GetModuleHandleA FreeEnvironmentStringsW CreateMailslotA GetStringTypeW GetCurrentDirectoryA PeekConsoleInputA SetCalendarInfoA ReadConsoleInputW FindFirstVolumeW GetVolumeNameForVolumeMountPointW GetConsoleProcessList ReadConsoleOutputCharacterW EnumSystemLocalesW DeleteFileA lstrcpyA CloseHandle CreateFileW WriteConsoleW GetConsoleAliasExesA GetFileSize SetInformationJobObject SetLastError GetPrivateProfileSectionNamesW Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EncodePointer DecodePointer WideCharToMultiByte HeapFree HeapAlloc ExitProcess MultiByteToWideChar HeapReAlloc HeapSetInformation GetStartupInfoW RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount RaiseException GetModuleFileNameA GetEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode LCMapStringW SetStdHandle FlushFileBuffers

user32

CharUpperW CharUpperBuffW

gdi32

GetCharWidthA GetCharWidthFloatW

advapi32

ReadEventLogA

Sharing