94a8cb37cf0aa2d1fedb893167f4dc67[.]exe

Resubmissions

23/08/2023, 11:12

230823-naxbpsbf7810

13/06/2023, 22:16

230613-16sdvaca6410

Sharing

Copy URL Twitter E-mail

General

Target
94a8cb37cf0aa2d1fedb893167f4dc67.exe
Size 276KB
Sample230823-naxbpsbf78
SHA256 0c66455c62f9e8d2755760f97d5e51e26267682cc9a6ec15bae1f1d0bbeaaa65
MD5 94a8cb37cf0aa2d1fedb893167f4dc67
SHA1 08b2d1d0ff9c73128faa4180377c7f1a0290252b
SHA512 52475d7a08673be460b4429692043aee04b1db9b6a700c96760d55bd339234574d8b739e8920fcb617da35a863eab1c21451b3b5b1fc5b2f85a25facc2c6a075
SSDEEP 6144:mQ2gt7NFrXs89+lmrZoYErwBPDAZ9DMkU1Zxt:ggzFf9ArwBLAjD+Zxt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94a8cb37cf0aa2d1fedb893167f4dc67.exe

File Explorer

94a8cb37cf0aa2d1fedb893167f4dc67.exe

.exe 276KB

94a8cb37cf0aa2d1fedb893167f4dc67.exe

IMPHASH 1b96bbe7f35030dff720bfd4a2e62f20
SHA256 0c66455c62f9e8d2755760f97d5e51e26267682cc9a6ec15bae1f1d0bbeaaa65
MD5 94a8cb37cf0aa2d1fedb893167f4dc67
SHA1 08b2d1d0ff9c73128faa4180377c7f1a0290252b
SHA512 52475d7a08673be460b4429692043aee04b1db9b6a700c96760d55bd339234574d8b739e8920fcb617da35a863eab1c21451b3b5b1fc5b2f85a25facc2c6a075
SSDEEP 6144:mQ2gt7NFrXs89+lmrZoYErwBPDAZ9DMkU1Zxt:ggzFf9ArwBLAjD+Zxt
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17486

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW WaitForSingleObject AddConsoleAliasW GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesA GetNumberFormatA ReadConsoleW GetConsoleAliasExesW FindResourceExA GlobalAlloc GetCalendarInfoW FormatMessageW GetSystemTimeAdjustment GetVersionExW FindNextVolumeW ReadFile CreateActCtxA GetACP GlobalUnlock GetLargestConsoleWindowSize InterlockedExchange _lwrite GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc IsValidCodePage LoadLibraryA WriteConsoleA FindFirstVolumeMountPointW SetConsoleCtrlHandler SetCurrentDirectoryW FindAtomA GetModuleFileNameA GetCommTimeouts CreateMutexA VirtualProtect GetCurrentThreadId FileTimeToLocalFileTime GetCurrentProcessId OpenFileMappingA CommConfigDialogW WriteConsoleW GetLocaleInfoA CreateTimerQueue GetLastError LocalUnlock GetConsoleOutputCP GetProcessHeap SetEndOfFile SetStdHandle FlushFileBuffers HeapFree Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc HeapCreate DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetStdHandle GetFileType WriteFile InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetCPInfo GetOEMCP CloseHandle CreateFileA SetFilePointer GetConsoleCP GetConsoleMode GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW

user32

GetCaretPos CharUpperBuffW LoadMenuW

gdi32

GetCharacterPlacementW

advapi32

MapGenericMask ReportEventW

ole32

ReadClassStg

winhttp

WinHttpOpen

msimg32

AlphaBlend