04645380b7a123e7e24f57c0e041dab2[.]exe

General

Target
04645380b7a123e7e24f57c0e041dab2.exe
Size 355KB
Sample230721-f8vxjacg7s
SHA256 f5e4e57c0c6b27846676f07828e2dc02837f03f83da2471701fbadea52fd742c
MD5 04645380b7a123e7e24f57c0e041dab2
SHA1 ecf4df5946a17fe9fa9101bfae6e7b6157fcb4ef
SHA512 57d761cb59f65f8605899b46c7041bec06fede27254073c2a911d1b8b7e2472dd06bcb572e1d3af64db18f143eb19ca0f3a88557553548adc5046a9d7d195771
SSDEEP 6144:jdtS/GZm98+dkSQaoqVB/OGq1wXQsvufaoqLZpA:7S/GhykSQaq1Kuido
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04645380b7a123e7e24f57c0e041dab2.exe

File Explorer

04645380b7a123e7e24f57c0e041dab2.exe

.exe 355KB

04645380b7a123e7e24f57c0e041dab2.exe

IMPHASH d13a3edb1af94cd33421fe16441c3d09
SHA256 f5e4e57c0c6b27846676f07828e2dc02837f03f83da2471701fbadea52fd742c
MD5 04645380b7a123e7e24f57c0e041dab2
SHA1 ecf4df5946a17fe9fa9101bfae6e7b6157fcb4ef
SHA512 57d761cb59f65f8605899b46c7041bec06fede27254073c2a911d1b8b7e2472dd06bcb572e1d3af64db18f143eb19ca0f3a88557553548adc5046a9d7d195771
SSDEEP 6144:jdtS/GZm98+dkSQaoqVB/OGq1wXQsvufaoqLZpA:7S/GhykSQaq1Kuido
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21908

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement GetConsoleAliasA SetConsoleScreenBufferSize GetComputerNameW BackupSeek FreeEnvironmentStringsA _lclose GetModuleHandleW GetConsoleAliasesLengthA GetCompressedFileSizeW GetConsoleAliasExesW WaitNamedPipeW GetCommandLineA GetDriveTypeA GetVolumePathNameW ActivateActCtx GlobalAlloc SetFileShortNameW LoadLibraryW FatalAppExitW ReadConsoleInputA GetPrivateProfileStructW DeleteVolumeMountPointW GetFileAttributesA WritePrivateProfileSectionW TerminateProcess GetOverlappedResult GetNamedPipeHandleStateW GetPrivateProfileIntW GetLastError GetCurrentDirectoryW _llseek ReadConsoleOutputCharacterA GetProcAddress HeapSize MoveFileW RemoveDirectoryA SetStdHandle InterlockedExchangeAdd OpenWaitableTimerW BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW SetConsoleCtrlHandler GetNumberFormatW GetProfileStringA FoldStringW FindNextFileA EnumDateFormatsA _lread CreateMailslotA GetStringTypeW GetCurrentDirectoryA DeleteCriticalSection GetShortPathNameW SetCalendarInfoA OpenSemaphoreW ReadConsoleInputW GetWindowsDirectoryW FindFirstVolumeW DeleteFileW EnumSystemLocalesW CreateFileW CloseHandle DeleteFileA MoveFileExA GetPrivateProfileSectionNamesW GetFileSize SetLastError GetVolumeNameForVolumeMountPointA InterlockedDecrement Sleep InitializeCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer MoveFileA WideCharToMultiByte HeapAlloc ExitProcess MultiByteToWideChar HeapReAlloc HeapSetInformation GetStartupInfoW HeapFree RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType WriteFile GetModuleFileNameW HeapCreate RaiseException GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent LCMapStringW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleW ReadFile

user32

CharUpperW CharUpperBuffW

gdi32

GetCharWidthA GetCharWidthFloatW

advapi32

ReadEventLogA

Sharing