a45bba403a79f0d47fb9106a83931437[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a45bba403a79f0d47fb9106a83931437.exe
Size 389KB
Sample230903-h69c9agh49
SHA256 1bba9ae0ebee70298d3d5e5bb02a844e07449c945a3a6b0e744c184f1abbe6dd
MD5 a45bba403a79f0d47fb9106a83931437
SHA1 b3c1df27740bfdadf0024e59d772704ff1a2370f
SHA512 f3f8b85474df12640e82235d78ad616ab5e895ab7eb057effbb98bbe1ddcbd6a5a552ed5f3513ef94a6e964b5a498fb6756632b5f822de14f6d4685f0149e52e
SSDEEP 6144:wY7dxria0EsjoLJu/GlbsWIU3yFOjgLUebH/:f7d9iatZJjLIU3ysgLUeL/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a45bba403a79f0d47fb9106a83931437.exe

File Explorer

a45bba403a79f0d47fb9106a83931437.exe

.exe 389KB

a45bba403a79f0d47fb9106a83931437.exe

IMPHASH e4dac514b3073faa484764761e4ff894
SHA256 1bba9ae0ebee70298d3d5e5bb02a844e07449c945a3a6b0e744c184f1abbe6dd
MD5 a45bba403a79f0d47fb9106a83931437
SHA1 b3c1df27740bfdadf0024e59d772704ff1a2370f
SHA512 f3f8b85474df12640e82235d78ad616ab5e895ab7eb057effbb98bbe1ddcbd6a5a552ed5f3513ef94a6e964b5a498fb6756632b5f822de14f6d4685f0149e52e
SSDEEP 6144:wY7dxria0EsjoLJu/GlbsWIU3yFOjgLUebH/:f7d9iatZJjLIU3ysgLUeL/
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34566

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile FindResourceW InterlockedDecrement InterlockedCompareExchange AddConsoleAliasW CreateHardLinkA ConnectNamedPipe FreeEnvironmentStringsA GetConsoleAliasesLengthA GetDateFormatA LoadLibraryW ReadConsoleInputA GetSystemWindowsDirectoryA GetFileAttributesW EnumResourceLanguagesA RaiseException FindFirstFileA InterlockedFlushSList SetLastError ReadConsoleOutputCharacterA GetProcAddress AttachConsole GetStringTypeA LoadLibraryA BuildCommDCBAndTimeoutsW SetFileApisToANSI FindAtomA GetOEMCP GetModuleHandleA EnumResourceNamesA GetShortPathNameW SetCalendarInfoA FileTimeToLocalFileTime FindFirstVolumeW CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW PeekNamedPipe CreateFileA FindFirstChangeNotificationW VirtualAlloc UnregisterWait FlushFileBuffers InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ReadFile SetFilePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode

user32

CharToOemBuffW EnumDesktopWindows ChangeMenuW GetMessageExtraInfo UnhookWinEvent CharUpperBuffA LoadMenuW

gdi32

GetCharacterPlacementA GetPolyFillMode

advapi32

ReadEventLogW

ole32

CoRegisterPSClsid