29227ecfabb9f27a144a638d37b5681b[.]exe

General

Target
29227ecfabb9f27a144a638d37b5681b.exe
Size 297KB
Sample230921-lycabsfc4s
SHA256 d239a96a2b15b78ab70b93fd103c76293eb4490593992d6b35c1ae7d7956ae15
MD5 29227ecfabb9f27a144a638d37b5681b
SHA1 3a39005afc7f50a143621fb4013598b8d222468c
SHA512 d98d2758e0f877a14c33de756e05d3a79449a4f55d6b029f32fc9152eb19404412c9ba7d8676598f3b5641130c8cb71592df0f0a440aa4a2a16be8f40b1df150
SSDEEP 3072:rxrXglKIErc9hLtbvfGmAtVxMezb72jKTWcTXH6ixog8Xje:r1YK3r+hLVXGl3z2jKScTXH6iag8T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29227ecfabb9f27a144a638d37b5681b.exe

File Explorer

29227ecfabb9f27a144a638d37b5681b.exe

.exe 297KB

29227ecfabb9f27a144a638d37b5681b.exe

IMPHASH c9ac49ec96641fb6cdc3cb11e7142d72
SHA256 d239a96a2b15b78ab70b93fd103c76293eb4490593992d6b35c1ae7d7956ae15
MD5 29227ecfabb9f27a144a638d37b5681b
SHA1 3a39005afc7f50a143621fb4013598b8d222468c
SHA512 d98d2758e0f877a14c33de756e05d3a79449a4f55d6b029f32fc9152eb19404412c9ba7d8676598f3b5641130c8cb71592df0f0a440aa4a2a16be8f40b1df150
SSDEEP 3072:rxrXglKIErc9hLtbvfGmAtVxMezb72jKTWcTXH6ixog8Xje:r1YK3r+hLVXGl3z2jKScTXH6iag8T
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW EnumCalendarInfoA GetDriveTypeW FindResourceW MoveFileExW SetDefaultCommConfigW CreateJobObjectW GetNamedPipeHandleStateA SetConsoleScreenBufferSize WriteConsoleInputA GetTimeFormatA GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesLengthA ReadConsoleW GetConsoleAliasExesW GetCommandLineA GetEnvironmentStrings GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW SetCommConfig TerminateThread GetLocaleInfoW DeleteVolumeMountPointW TransactNamedPipe LocalReAlloc GetStartupInfoW CreateMailslotW DisconnectNamedPipe GetShortPathNameA SetCurrentDirectoryA FindFirstFileA SetProcessAffinityMask ChangeTimerQueueTimer SetLastError GetThreadLocale MoveFileW CopyFileA EnumSystemCodePagesW GetProcessVersion LoadLibraryA RemoveDirectoryW FindAtomA GetOEMCP FindNextFileA GetModuleHandleA SetLocaleInfoW CreateMutexA GetProcessAffinityMask FreeEnvironmentStringsW FindNextFileW VirtualProtect PurgeComm GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA GetShortPathNameW TerminateJobObject FindAtomW GetWindowsDirectoryW FindFirstVolumeW GetFileInformationByHandle AddConsoleAliasA DebugBreak OpenFileMappingA EnumSystemLocalesW CreateFileW CloseHandle GetComputerNameA GetCommandLineW GetLastError GetVolumeNameForVolumeMountPointA MoveFileA HeapAlloc DeleteFileA EncodePointer DecodePointer HeapReAlloc HeapSetInformation GetProcAddress ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize HeapFree SetFilePointer GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP IsValidCodePage MultiByteToWideChar WideCharToMultiByte SetStdHandle GetConsoleMode FlushFileBuffers IsProcessorFeaturePresent LCMapStringW GetStringTypeW ReadFile WriteConsoleW RaiseException

user32

CharUpperA

gdi32

GetBoundsRect GetTextFaceW SetBkColor

Sharing