b2e6b0f96fdffca2b88ef57e8f5a4c24[.]exe

General

Target
b2e6b0f96fdffca2b88ef57e8f5a4c24.exe
Size 295KB
Sample230809-wqa3eaed88
SHA256 93529d9a4557671f8c6a7649e177af2cf02627edf7d7beb693c0f76c55b39713
MD5 b2e6b0f96fdffca2b88ef57e8f5a4c24
SHA1 abb6ae986899dc92b6c39c82c37c2b8d8e4834da
SHA512 ca6914359474bc892b3b12c301b0f3a9b223ae642240ee2950d3c664124e5678e65f496ece5fc315f58919af8828f3d0d57eb79a72323c7960106c1b1fae4f0f
SSDEEP 3072:FteyfZx8/pFDumzMLF7WQBvau9lOg9Bx1K6+m0KOELogtjiIm1wc:nj2FDumz+Fa2aYR9BxD/ZLYIYd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2e6b0f96fdffca2b88ef57e8f5a4c24.exe

File Explorer

b2e6b0f96fdffca2b88ef57e8f5a4c24.exe

.exe 295KB

b2e6b0f96fdffca2b88ef57e8f5a4c24.exe

IMPHASH 8b04667bf7005dc7bdd7ac468a9f7241
SHA256 93529d9a4557671f8c6a7649e177af2cf02627edf7d7beb693c0f76c55b39713
MD5 b2e6b0f96fdffca2b88ef57e8f5a4c24
SHA1 abb6ae986899dc92b6c39c82c37c2b8d8e4834da
SHA512 ca6914359474bc892b3b12c301b0f3a9b223ae642240ee2950d3c664124e5678e65f496ece5fc315f58919af8828f3d0d57eb79a72323c7960106c1b1fae4f0f
SSDEEP 3072:FteyfZx8/pFDumzMLF7WQBvau9lOg9Bx1K6+m0KOELogtjiIm1wc:nj2FDumz+Fa2aYR9BxD/ZLYIYd
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34028

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

BuildCommDCBAndTimeoutsA InterlockedIncrement MoveFileExW GetLogicalDriveStringsW GetSystemWindowsDirectoryW GetUserDefaultLCID FlushConsoleInputBuffer OpenSemaphoreA FreeEnvironmentStringsA MoveFileWithProgressA GetTickCount GenerateConsoleCtrlEvent GetConsoleAliasExesW WaitNamedPipeW EnumTimeFormatsA GetDateFormatA GetUserDefaultLangID GetCommandLineA GetDriveTypeA GlobalAlloc GetSystemDirectoryW LoadLibraryW GetConsoleMode ReadConsoleInputA _hread GetCalendarInfoW GetConsoleAliasExesLengthW DeleteVolumeMountPointW GetFileAttributesA GetTimeFormatW GetConsoleAliasW TerminateProcess lstrcatA CreateMailslotW GetPrivateProfileIntW _llseek GetHandleInformation GetCurrentDirectoryW SetLastError ReadConsoleOutputCharacterA GetProcAddress OpenWaitableTimerA LoadLibraryA OpenMutexA InterlockedExchangeAdd GetFileType MoveFileA GetNumberFormatW SetCurrentDirectoryW GetProfileStringA GlobalGetAtomNameW AddAtomA OpenJobObjectW CreateIoCompletionPort GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW QueryPerformanceFrequency PeekConsoleInputA SetFileShortNameA EndUpdateResourceA LocalSize GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DebugBreak ResetWriteWatch EnumSystemLocalesW DeleteFileA SetInformationJobObject SetProcessAffinityMask CreateMutexW GetStartupInfoA GetComputerNameA InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess SetFilePointer GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc SetStdHandle GetConsoleCP FlushFileBuffers WriteConsoleW CreateFileW CloseHandle

gdi32

GetTextFaceW GetCharWidthA

advapi32

InitializeAcl

Sharing