f96281b847a320f20f61912a44891fab[.]exe

General

Target
f96281b847a320f20f61912a44891fab.exe
Size 403KB
Sample230804-fgtkdsaf7w
SHA256 69f3bb57c68219505a660c704c331c92dbb0f1dfa4ffdf389a997e66b6c4507c
MD5 f96281b847a320f20f61912a44891fab
SHA1 d825d60b3a40d2161c6b578c2aa458374833b89f
SHA512 25aafd10bbfd6fbbdc805b70770687a7622b80aaa4c8d575b2dd1ba65cf7360ec6140b9906713a1e267985264252fa7f581291764659db330bf67c83080d3033
SSDEEP 6144:IFF/107QE8s1tcYW6vJfnKbV/m/Q+4dEXseY:ItsQE8Sd9FnKbZm/Q+4dV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f96281b847a320f20f61912a44891fab.exe

File Explorer

f96281b847a320f20f61912a44891fab.exe

.exe 403KB

f96281b847a320f20f61912a44891fab.exe

IMPHASH 53827632ddd0de733b0a70caaced2fc3
SHA256 69f3bb57c68219505a660c704c331c92dbb0f1dfa4ffdf389a997e66b6c4507c
MD5 f96281b847a320f20f61912a44891fab
SHA1 d825d60b3a40d2161c6b578c2aa458374833b89f
SHA512 25aafd10bbfd6fbbdc805b70770687a7622b80aaa4c8d575b2dd1ba65cf7360ec6140b9906713a1e267985264252fa7f581291764659db330bf67c83080d3033
SSDEEP 6144:IFF/107QE8s1tcYW6vJfnKbV/m/Q+4dEXseY:ItsQE8Sd9FnKbZm/Q+4dV
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21401

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW SetInformationJobObject GetConsoleAliasesLengthW GetConsoleAliasExesA ConvertThreadToFiber GetConsoleAliasExesLengthA DeleteVolumeMountPointA MoveFileExW InterlockedDecrement WaitNamedPipeA GetCurrentProcess GetSystemWindowsDirectoryW GetNamedPipeHandleStateA SetHandleInformation GetProfileStringW GetComputerNameW GetTimeFormatA FlushConsoleInputBuffer GetSystemDefaultLCID FreeEnvironmentStringsA _lclose _lcreat GetModuleHandleW GetNumberFormatA ReadConsoleOutputA EnumTimeFormatsW GetUserDefaultLangID GetCommandLineA GetDriveTypeA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW TerminateThread ReadConsoleInputA _hread GetCalendarInfoW GetConsoleAliasW IsDBCSLeadByte GetStartupInfoW CreateMailslotW SetCurrentDirectoryA GetLastError GetCurrentDirectoryW SetLastError GetProcAddress HeapSize BackupWrite MoveFileW SetComputerNameA OpenMutexA InterlockedExchangeAdd OpenWaitableTimerW GetFileType MoveFileA BuildCommDCBAndTimeoutsW SetConsoleCtrlHandler GlobalGetAtomNameW GetPrivateProfileStructA FindNextFileA CreateIoCompletionPort GetModuleHandleA OpenFileMappingW GetProcessAffinityMask FindNextFileW VirtualProtect EnumDateFormatsW GetConsoleCursorInfo FatalAppExitA PeekConsoleInputA OpenSemaphoreW FindFirstVolumeA LocalSize GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW DeleteFileW ReadConsoleOutputCharacterW EnumSystemLocalesW CloseHandle ReadFile WriteConsoleW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapFree HeapAlloc DeleteFileA ExitProcess HeapSetInformation RtlUnwind HeapCreate WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar IsProcessorFeaturePresent SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapReAlloc LCMapStringW CreateFileW

user32

CharUpperBuffA CharUpperA

Sharing