008a1399da9a0c5eae4e07d824aebbf5[.]exe

General

Target
008a1399da9a0c5eae4e07d824aebbf5.exe
Size 187KB
Sample230925-13xjdscc8x
SHA256 abcbbdb2a2eb219a82c3f446f74ac6ef93a3deb11e4c277dee8c106792d7b783
MD5 008a1399da9a0c5eae4e07d824aebbf5
SHA1 226b71e8ac41b6b23da79ab029b8b2b7f658dd81
SHA512 bacafe5f85a4fbee41aaaf38b0adfe02918b847b50260810ede0776f9eae0e3da187e9fcb082fdf41b0a45dedbacf525833878a1fe0f43fbf5486c947c6a6722
SSDEEP 3072:3AT14yQjetvX95X2mPtsvO++d77zE5ObRP5l1v:QT14y/f95Tmu77zw83
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
008a1399da9a0c5eae4e07d824aebbf5.exe

File Explorer

008a1399da9a0c5eae4e07d824aebbf5.exe

.exe 187KB

008a1399da9a0c5eae4e07d824aebbf5.exe

IMPHASH 9aba604e2d3c1b6b86e00b69bd9bbfab
SHA256 abcbbdb2a2eb219a82c3f446f74ac6ef93a3deb11e4c277dee8c106792d7b783
MD5 008a1399da9a0c5eae4e07d824aebbf5
SHA1 226b71e8ac41b6b23da79ab029b8b2b7f658dd81
SHA512 bacafe5f85a4fbee41aaaf38b0adfe02918b847b50260810ede0776f9eae0e3da187e9fcb082fdf41b0a45dedbacf525833878a1fe0f43fbf5486c947c6a6722
SSDEEP 3072:3AT14yQjetvX95X2mPtsvO++d77zE5ObRP5l1v:QT14y/f95Tmu77zw83
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16093

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstChangeNotificationW WriteConsoleInputW SetFilePointer PeekNamedPipe SetConsoleTextAttribute ReadConsoleA InterlockedDecrement GetLogicalDriveStringsW GlobalLock SetVolumeMountPointW ConnectNamedPipe FreeEnvironmentStringsA GetTickCount SizeofResource HeapDestroy GetFileAttributesW GetGeoInfoA CreateFileW SetThreadPriority GetShortPathNameA GetLastError SetLastError GetProcAddress GetTempFileNameW BackupWrite LoadLibraryA InterlockedExchangeAdd CreateHardLinkW BeginUpdateResourceA SetProcessWorkingSetSize OpenJobObjectW FoldStringA GetModuleFileNameA GetModuleHandleA EnumResourceNamesA FindNextFileW OpenSemaphoreW FindFirstVolumeW GetConsoleProcessList ReadConsoleOutputCharacterW FindNextVolumeA LocalFileTimeToFileTime GetProcessHeap SetEndOfFile GetDateFormatW GetThreadContext VirtualAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetCommandLineA GetStartupInfoA GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapCreate VirtualFree HeapReAlloc RtlUnwind MultiByteToWideChar ReadFile GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers

user32

GetClassInfoExW LoadMenuW CharToOemBuffW GetMessageExtraInfo

gdi32

GetColorAdjustment

advapi32

InitiateSystemShutdownA

Sharing