4be7753578798f812b7554df37d193a31efb2b4157b1322aba403681d75c8eb7

General

Target
4be7753578798f812b7554df37d193a31efb2b4157b1322aba403681d75c8eb7
Size 266KB
Sample230927-srgpssbf8x
SHA256 4be7753578798f812b7554df37d193a31efb2b4157b1322aba403681d75c8eb7
MD5 e9ef33bfe856755c139e4105f3f35d3e
SHA1 82730a1da0be3d9d67680c0bfe50f3c0e24fc36c
SHA512 b132bcc05d4c0071c8d0ff1a3fa974c4be452c115257dec02f4cfed80b8d7b6e37797749b6b440cf10f22931219e78f59498c3c60450288fce6383cb08f25a45
SSDEEP 6144:ue/nfCBHJx6cOrvT0ms0KTKD/ydLwMxNT:rf2px6cOzjsRTFdLJ5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4be7753578798f812b7554df37d193a31efb2b4157b1322aba403681d75c8eb7

File Explorer

4be7753578798f812b7554df37d193a31efb2b4157b1322aba403681d75c8eb7

.exe 266KB

4be7753578798f812b7554df37d193a31efb2b4157b1322aba403681d75c8eb7

IMPHASH bc3d38d3f984a249202a9d2d7f962887
SHA256 4be7753578798f812b7554df37d193a31efb2b4157b1322aba403681d75c8eb7
MD5 e9ef33bfe856755c139e4105f3f35d3e
SHA1 82730a1da0be3d9d67680c0bfe50f3c0e24fc36c
SHA512 b132bcc05d4c0071c8d0ff1a3fa974c4be452c115257dec02f4cfed80b8d7b6e37797749b6b440cf10f22931219e78f59498c3c60450288fce6383cb08f25a45
SSDEEP 6144:ue/nfCBHJx6cOrvT0ms0KTKD/ydLwMxNT:rf2px6cOzjsRTFdLJ5
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20463

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess EnumResourceNamesW VirtualQuery InterlockedDecrement GetSystemWindowsDirectoryW OpenSemaphoreA FreeEnvironmentStringsA GetTickCount GetNumberFormatA ReadConsoleW GetGeoInfoW GetDateFormatA ReadConsoleInputA GetThreadSelectorEntry AssignProcessToJobObject SizeofResource SetVolumeMountPointA GetProcessHandleCount HeapCreate TransactNamedPipe GetFileAttributesW IsDBCSLeadByte CreateFileW GetLastError SetLastError GetProcAddress VirtualAlloc BackupWrite GetTempFileNameA LoadLibraryA InterlockedExchangeAdd OpenWaitableTimerW WritePrivateProfileStringA CreateHardLinkW BeginUpdateResourceA SetConsoleWindowInfo GetCommMask AddAtomA OpenJobObjectW FoldStringW CreatePipe GetOEMCP FindNextFileA GetModuleHandleA OpenFileMappingW GetShortPathNameW FindFirstVolumeA FindFirstVolumeW ReadConsoleOutputCharacterW LocalFileTimeToFileTime ReadFile GetProcessHeap SetEndOfFile UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc RaiseException VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize RtlUnwind SetFilePointer InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP IsValidCodePage CloseHandle CreateFileA SetStdHandle GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

ChangeDisplaySettingsW LoadMenuA GetClassInfoExW GetScrollInfo CharToOemBuffW GetMessageExtraInfo

Sharing

General

Malware Config

Signatures

File Explorer

4be7753578798f812b7554df37d193a31efb2b4157b1322aba403681d75c8eb7

kernel32

user32