ca3048f3c3dfc5345968cbfed67cf23d[.]exe

General

Target
ca3048f3c3dfc5345968cbfed67cf23d.exe
Size 263KB
Sample230726-s2hd3sec8s
SHA256 180bb4e28a2faaf8faee1afd083ddfb01782420a1a72a6545a93ec5487b58c78
MD5 ca3048f3c3dfc5345968cbfed67cf23d
SHA1 ad65f42df846d04605db78e9d9d724539ee2ab2e
SHA512 47633b518379304f0c7b8cd0f409d49dfdc762d4b138c6c7f955ffdeb75d8e9607d4e055ef5285b4b6cf4ab233ec1cb5af2b0e09dfc3080e1b28ba27402a5cc2
SSDEEP 6144:Qgw3guF95PGwRd1VQUFOvH4t4RV96snA0:nwQu5h52UFOvH4tUem
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca3048f3c3dfc5345968cbfed67cf23d.exe

File Explorer

ca3048f3c3dfc5345968cbfed67cf23d.exe

.exe 263KB

ca3048f3c3dfc5345968cbfed67cf23d.exe

IMPHASH 5ea05395629dd7cfa2fe7ed080de0303
SHA256 180bb4e28a2faaf8faee1afd083ddfb01782420a1a72a6545a93ec5487b58c78
MD5 ca3048f3c3dfc5345968cbfed67cf23d
SHA1 ad65f42df846d04605db78e9d9d724539ee2ab2e
SHA512 47633b518379304f0c7b8cd0f409d49dfdc762d4b138c6c7f955ffdeb75d8e9607d4e055ef5285b4b6cf4ab233ec1cb5af2b0e09dfc3080e1b28ba27402a5cc2
SSDEEP 6144:Qgw3guF95PGwRd1VQUFOvH4t4RV96snA0:nwQu5h52UFOvH4tUem
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21791

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetDefaultCommConfigA AllocConsole BuildCommDCBAndTimeoutsA DeleteVolumeMountPointA MoveFileExW InterlockedDecrement HeapFree GetProfileStringW SetComputerNameW FlushConsoleInputBuffer OpenSemaphoreA FreeEnvironmentStringsA _lclose _lcreat GetModuleHandleW GetConsoleAliasesLengthA GetCompressedFileSizeW WaitNamedPipeW EnumTimeFormatsA GetDriveTypeA OpenProcess SetFileShortNameW LoadLibraryW ReadConsoleInputA _hread GetCalendarInfoA GetConsoleAliasExesLengthW GetFileAttributesA TransactNamedPipe GetTimeFormatW GetConsoleAliasW TerminateProcess GetComputerNameA GetShortPathNameA GetNamedPipeHandleStateW GetPrivateProfileIntW GetStartupInfoA GetLastError IsDBCSLeadByteEx SetLastError BackupRead ReadConsoleOutputCharacterA GetProcAddress CreateNamedPipeA MoveFileW OpenWaitableTimerA InterlockedExchangeAdd LocalAlloc GetNumberFormatW GetPrivateProfileStructA GetModuleHandleA UpdateResourceW FindNextFileW CreateMailslotA GetStringTypeW GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA FindFirstVolumeA GetWindowsDirectoryW DeleteFileW DeleteFileA CloseHandle ReadFile CreateFileW GetOverlappedResult GetCommandLineW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer MoveFileA HeapAlloc HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RtlUnwind SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW HeapCreate SetFilePointer HeapSize RaiseException GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar IsProcessorFeaturePresent GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers LCMapStringW WriteConsoleW

user32

CharUpperBuffA CharUpperA

advapi32

RevertToSelf

Sharing