9494e546b003b80987a521858553242c[.]exe

General

Target
9494e546b003b80987a521858553242c.exe
Size 257KB
Sample230802-k4glkafa4y
SHA256 432c2a73d8964d29b539c57e5c7f2d5eda6d4eef667c02e95b4c26a1c37d58e9
MD5 9494e546b003b80987a521858553242c
SHA1 6bdf37f9bcab9340a1658a27a11ea96b9f290a0d
SHA512 4a18355886929fba9729f34f876b5df47391ba3b92014f068623bef3dd335eb153c30bdcf232e7b88677219ef43d0a3e37970870ebdc6a9a3e95478005338f1a
SSDEEP 3072:NnRF0+Pf2fNuZIeYY8ltlyOqMf3Z+e8AnJgwjtIMmC4lHD7j1s:NRF3X2VuZVYTltJ/+e8AnJZtIMrOx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9494e546b003b80987a521858553242c.exe

File Explorer

9494e546b003b80987a521858553242c.exe

.exe 257KB

9494e546b003b80987a521858553242c.exe

IMPHASH a01249a11ad56cc27bb7173ed6438e32
SHA256 432c2a73d8964d29b539c57e5c7f2d5eda6d4eef667c02e95b4c26a1c37d58e9
MD5 9494e546b003b80987a521858553242c
SHA1 6bdf37f9bcab9340a1658a27a11ea96b9f290a0d
SHA512 4a18355886929fba9729f34f876b5df47391ba3b92014f068623bef3dd335eb153c30bdcf232e7b88677219ef43d0a3e37970870ebdc6a9a3e95478005338f1a
SSDEEP 3072:NnRF0+Pf2fNuZIeYY8ltlyOqMf3Z+e8AnJgwjtIMmC4lHD7j1s:NRF3X2VuZVYTltJ/+e8AnJZtIMrOx
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21717

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetCommandLineW GetComputerNameA GetFileSize SetDefaultCommConfigA GetDriveTypeW GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA UpdateResourceA InterlockedIncrement MoveFileExW GetConsoleAliasA InterlockedDecrement WaitNamedPipeA GetCurrentProcess SetConsoleActiveScreenBuffer GetProfileStringW GetUserDefaultLCID SetComputerNameW FreeEnvironmentStringsA _lclose _lcreat GetModuleHandleW CreateNamedPipeW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsW GlobalAlloc GetPrivateProfileIntA SetFileShortNameW LoadLibraryW TerminateThread ReadConsoleInputA _hread GetPrivateProfileStructW GetCalendarInfoW SetConsoleCP DeleteVolumeMountPointW GetFileAttributesA TransactNamedPipe GetTimeFormatW GetCompressedFileSizeA GetStartupInfoW CreateMailslotW GetNamedPipeHandleStateW EnumSystemLocalesA SetCurrentDirectoryA GetLastError IsDBCSLeadByteEx SetLastError GetProcAddress BackupWrite MoveFileW GlobalFree LoadLibraryA OpenWaitableTimerW LocalAlloc SetConsoleCtrlHandler GlobalGetAtomNameW FindNextChangeNotification CreateIoCompletionPort _lread GetModuleHandleA OpenFileMappingW FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetConsoleCursorInfo FatalAppExitA OpenSemaphoreW FindFirstVolumeA TerminateJobObject LocalSize DeleteFileW ReadConsoleOutputCharacterW DeleteFileA CloseHandle ReadFile WriteConsoleW LCMapStringW HeapReAlloc Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapFree HeapAlloc ExitProcess GetCommandLineA HeapSetInformation RtlUnwind HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess WriteFile GetModuleFileNameW SetFilePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar IsProcessorFeaturePresent GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers CreateFileW

user32

CharUpperA CharUpperBuffA

winhttp

WinHttpCloseHandle

Sharing