f34f66fe4a437f08e62ea15c1e3b64a2[.]exe

General

Target
f34f66fe4a437f08e62ea15c1e3b64a2.exe
Size 300KB
Sample230913-3pegrsff6s
SHA256 b20e910bf0d9ee01fb367d6804425b1c8ef31173229efbd013e97469f9354b30
MD5 f34f66fe4a437f08e62ea15c1e3b64a2
SHA1 e08465a2f31402b533df549af61131e17cc9f130
SHA512 923b631f4cad9ad8261c46124d93a2159ea04138554b1493024a13f819878e5fef316ff7bbb07b714ada2646aa1f83211147e12408212171d91530ddb16da200
SSDEEP 3072:U7GKqnNvA9VF1nO8t1cVclNHdgPkvt9o+2BhkFAiPEa+O3:UdAq9VF1nO83AiNH5tm+2A3+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f34f66fe4a437f08e62ea15c1e3b64a2.exe

File Explorer

f34f66fe4a437f08e62ea15c1e3b64a2.exe

.exe 300KB

f34f66fe4a437f08e62ea15c1e3b64a2.exe

IMPHASH 0f300ecf1964cde7c4420d52f8a9784e
SHA256 b20e910bf0d9ee01fb367d6804425b1c8ef31173229efbd013e97469f9354b30
MD5 f34f66fe4a437f08e62ea15c1e3b64a2
SHA1 e08465a2f31402b533df549af61131e17cc9f130
SHA512 923b631f4cad9ad8261c46124d93a2159ea04138554b1493024a13f819878e5fef316ff7bbb07b714ada2646aa1f83211147e12408212171d91530ddb16da200
SSDEEP 3072:U7GKqnNvA9VF1nO8t1cVclNHdgPkvt9o+2BhkFAiPEa+O3:UdAq9VF1nO83AiNH5tm+2A3+
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28826

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GetConsoleAliasesLengthW GetNumaProcessorNode MoveFileExA BuildCommDCBAndTimeoutsA SystemTimeToTzSpecificLocalTime InterlockedIncrement InterlockedDecrement SetDefaultCommConfigW CreateJobObjectW GetEnvironmentStringsW GetProfileStringW AddConsoleAliasW SetVolumeMountPointW GetModuleHandleW GenerateConsoleCtrlEvent GetNumberFormatA GetConsoleAliasExesW EnumTimeFormatsA GetCommandLineA GetDriveTypeA GetConsoleCP LoadLibraryW TerminateThread FatalAppExitW CopyFileW SetVolumeMountPointA SetConsoleCursorPosition GetStartupInfoW CreateMailslotW GetPrivateProfileIntW SetLocaleInfoA GetStartupInfoA SetThreadLocale GetHandleInformation GetLastError GetCurrentDirectoryW BackupRead RemoveDirectoryA EnumSystemCodePagesW LoadLibraryA OpenMutexA GetProcessId LocalAlloc EnumDateFormatsA GlobalUnWire GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA PeekConsoleInputA GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DeleteFileW CreateFileW ReadFile FlushFileBuffers GetCommandLineW FindFirstFileW GetFileSize EnumResourceNamesW GetComputerNameA InterlockedExchange Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc GetProcAddress ExitProcess DeleteFileA HeapReAlloc HeapSetInformation RaiseException HeapFree RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType WriteFile GetModuleFileNameW HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar SetFilePointer WideCharToMultiByte GetConsoleMode LCMapStringW SetStdHandle WriteConsoleW CloseHandle

user32

GetComboBoxInfo CharUpperW

gdi32

GetBoundsRect SelectPalette GetTextFaceW

advapi32

LookupAccountSidW

Sharing