b2c05d6fee47f1c3b44226a8af13f799[.]exe

General

Target
b2c05d6fee47f1c3b44226a8af13f799.exe
Size 296KB
Sample230802-k4gassfa4x
SHA256 a52921112e0ccf922d4dbf38d241e5d03fb77bf9940354b37581d4d1c6d86054
MD5 b2c05d6fee47f1c3b44226a8af13f799
SHA1 45eab9a0ee2b79760788547b2cc98fb412c40c1c
SHA512 8328dd08b31dacdcc992dd55ce680e39700699660c5a3704cbbde3c6d4dee88a7017dfbde4f247d8d9639f1d1259cc96a42d9c7fd5a85f13711423801a7224eb
SSDEEP 6144:DaQxR/d4ZuHkLvKzM+QvsBL70F4X5XMyItG+:OQF4ZuEjKHQvsBL4F4J8yK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2c05d6fee47f1c3b44226a8af13f799.exe

File Explorer

b2c05d6fee47f1c3b44226a8af13f799.exe

.exe 296KB

b2c05d6fee47f1c3b44226a8af13f799.exe

IMPHASH 3a7bb8aec93d4df8411ca71cb120c6d7
SHA256 a52921112e0ccf922d4dbf38d241e5d03fb77bf9940354b37581d4d1c6d86054
MD5 b2c05d6fee47f1c3b44226a8af13f799
SHA1 45eab9a0ee2b79760788547b2cc98fb412c40c1c
SHA512 8328dd08b31dacdcc992dd55ce680e39700699660c5a3704cbbde3c6d4dee88a7017dfbde4f247d8d9639f1d1259cc96a42d9c7fd5a85f13711423801a7224eb
SSDEEP 6144:DaQxR/d4ZuHkLvKzM+QvsBL70F4X5XMyItG+:OQF4ZuEjKHQvsBL4F4J8yK
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33833

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA FindResourceA lstrlenA WritePrivateProfileStructA GetConsoleAliasesLengthW PeekNamedPipe TlsGetValue AllocConsole FindResourceW HeapAlloc _lwrite InterlockedDecrement InterlockedCompareExchange FindCloseChangeNotification OpenSemaphoreA ConnectNamedPipe GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA FormatMessageA GetCompressedFileSizeW LoadLibraryW GetLocaleInfoW WriteConsoleOutputA TransactNamedPipe GetNamedPipeInfo CreateActCtxA GetDateFormatW GetProfileIntA GetLastError lstrcmpiA GetProcAddress AttachConsole VirtualAlloc CreateMemoryResourceNotification SearchPathA SetFileApisToOEM LoadLibraryA OpenMutexA DeleteTimerQueue EnumResourceTypesW GetThreadPriority GetCommTimeouts HeapSetInformation UpdateResourceW GetStringTypeW Module32NextW ReadConsoleInputW GetWindowsDirectoryW GetCurrentProcessId AddConsoleAliasA ResetWriteWatch WriteConsoleW GetConsoleOutputCP WriteConsoleA GetComputerNameA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapCreate VirtualFree HeapReAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle SetEndOfFile GetProcessHeap ReadFile

user32

CharUpperBuffA LoadMenuW CharLowerBuffA CharToOemBuffA

advapi32

InitiateSystemShutdownA

Sharing