670add147fa800c55dae647a90f9e4c1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
670add147fa800c55dae647a90f9e4c1.exe
Size 334KB
Sample230915-kgetfshf9v
SHA256 b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2
MD5 670add147fa800c55dae647a90f9e4c1
SHA1 a1fb811f5766f7b5440bcf835e34e4cd7ac66d94
SHA512 2862dc769344abc65dcf3387df6bf0de56e7f36896b89b0937e83173ba97052fa1955c5c65eefb599b776a4dc5007fc2c26f14c43e0ab75c1081b414e77160bf
SSDEEP 6144:zFH8RIT6Fam1StJ3rXDW49Vl7SkDHPiaODgKYleQ4SWP:zWdGXDzP7aM+P
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
670add147fa800c55dae647a90f9e4c1.exe

File Explorer

670add147fa800c55dae647a90f9e4c1.exe

.exe 334KB

670add147fa800c55dae647a90f9e4c1.exe

IMPHASH ce0c54abf9cb1706cf3f091f1f306b7f
SHA256 b767902c36417651810c83e7331e8936c5560e5eced3b8d02674b6a4a0c4e4a2
MD5 670add147fa800c55dae647a90f9e4c1
SHA1 a1fb811f5766f7b5440bcf835e34e4cd7ac66d94
SHA512 2862dc769344abc65dcf3387df6bf0de56e7f36896b89b0937e83173ba97052fa1955c5c65eefb599b776a4dc5007fc2c26f14c43e0ab75c1081b414e77160bf
SSDEEP 6144:zFH8RIT6Fam1StJ3rXDW49Vl7SkDHPiaODgKYleQ4SWP:zWdGXDzP7aM+P
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

187076

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCreateKeyExW RegCloseKey RegSetValueExW RegQueryValueExW RegDeleteValueW RegOpenKeyExW RegNotifyChangeKeyValue RegFlushKey

kernel32

EnterCriticalSection DeleteCriticalSection GetCommandLineW lstrlenA FreeLibrary WaitForSingleObject SetEvent RegisterApplicationRestart LoadLibraryW Sleep CreateEventW WaitForMultipleObjects HeapSetInformation GetCurrentThreadId CloseHandle GetVersionExW GetProcAddress GetSystemInfo GetFullPathNameW WideCharToMultiByte ReadFile GetProcessHeap SetEndOfFile GetCurrentDirectoryW VirtualQuery SetThreadStackGuarantee VirtualAlloc VirtualProtect FlushFileBuffers SetStdHandle CreateFileW GetConsoleMode GetConsoleCP SetFilePointer GetStringTypeW MultiByteToWideChar LCMapStringW LoadLibraryExW InitializeCriticalSectionAndSpinCount HeapSize GetOEMCP GetACP GetCPInfo OutputDebugStringA RtlCaptureContext RtlVirtualUnwind lstrlenW GetModuleFileNameW GetFileAttributesW LeaveCriticalSection GetSystemDirectoryW InitializeCriticalSection WriteConsoleW UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter HeapCreate FlsAlloc GetCommandLineA GetStartupInfoW GetLastError HeapFree HeapReAlloc ExitThread FlsSetValue FlsGetValue CreateThread RaiseException RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx HeapAlloc SetUnhandledExceptionFilter GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType EncodePointer DecodePointer FlsFree SetLastError

user32

UpdateWindow SetWindowTextW DispatchMessageW EnableWindow DestroyWindow SetTimer GetWindowRect PostQuitMessage PostMessageW KillTimer MsgWaitForMultipleObjects GetKeyState SetForegroundWindow GetFocus DialogBoxParamW CallNextHookEx IsWindowEnabled GetWindowLongPtrW GetClientRect SetFocus TranslateMessage IsDialogMessageW LoadIconW GetWindowLongW PeekMessageW GetDlgItem EndDialog GetDesktopWindow SetWindowPos LoadStringW CheckDlgButton ShowWindow CreateDialogParamW SetWindowsHookExW AdjustWindowRectEx UnhookWindowsHookEx MessageBoxW SendMessageW

comctl32

ImageList_Create ImageList_ReplaceIcon ord17 ImageList_Destroy

comdlg32

GetSaveFileNameW

shell32

ShellExecuteW

ole32

CoUninitialize CoInitialize CoInitializeSecurity CoCreateInstance

oleaut32

SysFreeString SysAllocString VariantInit VariantClear