d8b749cb322160fe7493300668983494[.]exe

General

Target
d8b749cb322160fe7493300668983494.exe
Size 370KB
Sample230720-jgdqqaea71
SHA256 78a80da889fb77e1536903aa1d2abef676b1663c0cdff25dc03f16254ea2168e
MD5 d8b749cb322160fe7493300668983494
SHA1 6e2c7f760f0a8c8809f51d77fecfd9e6b8adecde
SHA512 973343565997b0fe56484bfb0463097750b94b71f173d238c7d778aa153a2784547802d24f4f196cf2fb53481410116a48ab340a589ae50b9573c0a74dc47b81
SSDEEP 6144:iTQMLxiCEeIu1w2KvbOgc/PXm7iNJQqU2O4A8/N60S:iMMtn1wJbOgEuUQqU2O4z/U0S
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8b749cb322160fe7493300668983494.exe

File Explorer

d8b749cb322160fe7493300668983494.exe

.exe 370KB

d8b749cb322160fe7493300668983494.exe

IMPHASH 2c1d6f07319e916f23334deb261840fd
SHA256 78a80da889fb77e1536903aa1d2abef676b1663c0cdff25dc03f16254ea2168e
MD5 d8b749cb322160fe7493300668983494
SHA1 6e2c7f760f0a8c8809f51d77fecfd9e6b8adecde
SHA512 973343565997b0fe56484bfb0463097750b94b71f173d238c7d778aa153a2784547802d24f4f196cf2fb53481410116a48ab340a589ae50b9573c0a74dc47b81
SSDEEP 6144:iTQMLxiCEeIu1w2KvbOgc/PXm7iNJQqU2O4A8/N60S:iMMtn1wJbOgEuUQqU2O4z/U0S
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24023

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW EnumDateFormatsExW FindResourceW GlobalAddAtomA EnumCalendarInfoW _lwrite ScrollConsoleScreenBufferW AddConsoleAliasW GetComputerNameW GetTickCount GetConsoleAliasesA GlobalAlloc LoadLibraryW FreeConsole EnumSystemCodePagesA FindNextVolumeW ReadFile GetCompressedFileSizeA SetThreadPriority DisconnectNamedPipe GetConsoleAliasesW InterlockedExchange GetProfileIntA lstrlenA SetLastError lstrcmpiA GetProcAddress VirtualAlloc LoadLibraryA SetCurrentDirectoryW GetOEMCP GetModuleHandleA SetLocaleInfoW CreateMutexA FatalAppExitA SetProcessShutdownParameters _lopen OpenSemaphoreW SetFileShortNameA ReadConsoleInputW GetWindowsDirectoryW DeleteFileW LocalFileTimeToFileTime CreateFileA CloseHandle WriteConsoleW OpenMutexW GetDateFormatW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar GetStartupInfoW RtlUnwind RaiseException GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent GetCPInfo GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

DdeQueryStringW CharUpperBuffA LoadMenuW CharLowerBuffW

advapi32

InitializeAcl

Sharing