1665ef03c15113763716644a5e89f5c0[.]exe

General

Target
1665ef03c15113763716644a5e89f5c0.exe
Size 297KB
Sample230802-k4gassfa4v
SHA256 e1cd0fe76134275aaccb166d23a7eb8f18079ddc551fad4ee6c1b9b9abe2aa62
MD5 1665ef03c15113763716644a5e89f5c0
SHA1 18a165e5e6a3706adb85c34775cb2d7c1b66b7b7
SHA512 0f3f226d8e07f157d2aed0fccb230f9bf169faa26f4436abfa77ae40c116d10d8d227e5e48fdf15e576575783f1965f0c4a0fa2b22f3ffa5aae1a8577ea36d43
SSDEEP 3072:ORFR7Whx1PWdBUjf8CnsHgW/fprqHdn0KP0D4EICtuGRL8slAIBA:EFhy1PWdqJWLUecwtdRLTb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1665ef03c15113763716644a5e89f5c0.exe

File Explorer

1665ef03c15113763716644a5e89f5c0.exe

.exe 297KB

1665ef03c15113763716644a5e89f5c0.exe

IMPHASH 4a60f94d678887610d46dafb1219713a
SHA256 e1cd0fe76134275aaccb166d23a7eb8f18079ddc551fad4ee6c1b9b9abe2aa62
MD5 1665ef03c15113763716644a5e89f5c0
SHA1 18a165e5e6a3706adb85c34775cb2d7c1b66b7b7
SHA512 0f3f226d8e07f157d2aed0fccb230f9bf169faa26f4436abfa77ae40c116d10d8d227e5e48fdf15e576575783f1965f0c4a0fa2b22f3ffa5aae1a8577ea36d43
SSDEEP 3072:ORFR7Whx1PWdBUjf8CnsHgW/fprqHdn0KP0D4EICtuGRL8slAIBA:EFhy1PWdqJWLUecwtdRLTb
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21481

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetFileSize GetConsoleAliasExesA GetDriveTypeW GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA InterlockedIncrement MoveFileExW GetConsoleAliasA InterlockedDecrement WaitNamedPipeA GetCurrentProcess GetNamedPipeHandleStateA SetHandleInformation GetProfileStringW GetUserDefaultLCID SetComputerNameW GetComputerNameW FlushConsoleInputBuffer FreeEnvironmentStringsA _lclose _lcreat GetModuleHandleW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID GetCommandLineA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW ReadConsoleInputA _hread GetPrivateProfileStructW GetCalendarInfoW SetConsoleCP DeleteVolumeMountPointW TransactNamedPipe GetTimeFormatW ExitThread CreateMailslotW EnumSystemLocalesA SetCurrentDirectoryA GetStartupInfoA GetLastError IsDBCSLeadByteEx SetLastError GetProcAddress BackupWrite MoveFileW GlobalFree LoadLibraryA OpenWaitableTimerW SetConsoleCtrlHandler GlobalGetAtomNameW FindNextFileA CreateIoCompletionPort _lread GetModuleHandleA OpenFileMappingW GetProcessAffinityMask FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetConsoleCursorInfo PeekConsoleInputA OpenSemaphoreW FindFirstVolumeA TerminateJobObject LocalSize GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak ReadConsoleOutputCharacterW DeleteFileA CloseHandle ReadFile WriteConsoleW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapFree HeapAlloc ExitProcess HeapSetInformation GetStartupInfoW RtlUnwind HeapCreate WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar IsProcessorFeaturePresent SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapReAlloc LCMapStringW CreateFileW

user32

CharUpperBuffA CharUpperA

Sharing