d4dc50cec8d2adf7016def3a087d0967[.]exe

General

Target
d4dc50cec8d2adf7016def3a087d0967.exe
Size 457KB
Sample230802-we5smsgc89
SHA256 8cab8c469e6d189481f0f2787f7b550bae9a7efd3c79bb7e2d84b58f8731d28f
MD5 d4dc50cec8d2adf7016def3a087d0967
SHA1 02895535548a6c84d1cf97a1d60df5ab79b3e867
SHA512 766fe3a4ebe8cefe92a84d2c8e6539c67013b8da057a28bb3568c4a7c6ba194ef8f685af426fb9f86eced84e16e2278a1962fc4bd6ef61b31dff52ffdee92f9b
SSDEEP 6144:YFa71pQ4+Q3Ni0aOKzEl5ZOzphtkG12UQPUbGkm58PH7:YUm4BdvaOnF0ztrfFb8OH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4dc50cec8d2adf7016def3a087d0967.exe

File Explorer

d4dc50cec8d2adf7016def3a087d0967.exe

.exe 457KB

d4dc50cec8d2adf7016def3a087d0967.exe

IMPHASH 94188224113cec6f774a38879ab75dff
SHA256 8cab8c469e6d189481f0f2787f7b550bae9a7efd3c79bb7e2d84b58f8731d28f
MD5 d4dc50cec8d2adf7016def3a087d0967
SHA1 02895535548a6c84d1cf97a1d60df5ab79b3e867
SHA512 766fe3a4ebe8cefe92a84d2c8e6539c67013b8da057a28bb3568c4a7c6ba194ef8f685af426fb9f86eced84e16e2278a1962fc4bd6ef61b31dff52ffdee92f9b
SSDEEP 6144:YFa71pQ4+Q3Ni0aOKzEl5ZOzphtkG12UQPUbGkm58PH7:YUm4BdvaOnF0ztrfFb8OH
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21497

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetFileSize GetConsoleAliasExesA GetDriveTypeW GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA InterlockedIncrement MoveFileExW GetConsoleAliasA InterlockedDecrement WaitNamedPipeA GetCurrentProcess GetNamedPipeHandleStateA SetHandleInformation GetProfileStringW GetUserDefaultLCID SetComputerNameW GetComputerNameW FlushConsoleInputBuffer FreeEnvironmentStringsA _lclose _lcreat GetModuleHandleW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID GetCommandLineA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW ReadConsoleInputA _hread GetPrivateProfileStructW GetCalendarInfoW SetConsoleCP DeleteVolumeMountPointW TransactNamedPipe GetTimeFormatW ExitThread CreateMailslotW EnumSystemLocalesA SetCurrentDirectoryA GetStartupInfoA GetLastError IsDBCSLeadByteEx SetLastError GetProcAddress BackupWrite MoveFileW GlobalFree LoadLibraryA OpenWaitableTimerW SetConsoleCtrlHandler GlobalGetAtomNameW FindNextFileA CreateIoCompletionPort _lread GetModuleHandleA OpenFileMappingW GetProcessAffinityMask FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetConsoleCursorInfo PeekConsoleInputA OpenSemaphoreW FindFirstVolumeA TerminateJobObject LocalSize GetVolumeNameForVolumeMountPointW DeleteFileW ReadConsoleOutputCharacterW DeleteFileA CloseHandle ReadFile WriteConsoleW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapFree HeapAlloc ExitProcess HeapSetInformation GetStartupInfoW RtlUnwind HeapCreate WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar IsProcessorFeaturePresent SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapReAlloc LCMapStringW CreateFileW

user32

CharUpperBuffA CharUpperA

Sharing