asca1ex1234[.]exe | Triage™

General

Target
asca1ex1234.exe
Size 407KB
Sample231001-kw59ysbc42
SHA256 a744a3c6231d68eb30fd4ec1c1deb3830b13b36d3c4bae9ebf03c3d1380b0f79
MD5 264d1eb69bcce00fdf11a6a39472dd0a
SHA1 e466c80da7f961743681b6dbdae3eaa0756a4dcd
SHA512 f45a0da6d82081f787b385595c34a8abc6552d0e73dd393789f93a1b2910efc8ab413668d347726ae874c298c9c3ac458e7e422e98ad2bb3354b8c8563ecbed9
SSDEEP 12288:eMAIy7c3/N0NZab1USs2zwAmNOr7hXqs:qIy7cVqZabE2EAn7hXX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
asca1ex1234.exe

File Explorer

asca1ex1234.exe

.exe 407KB

asca1ex1234.exe

IMPHASH 231ae748dbc4fa94aca4a2ab6a3f3a91
SHA256 a744a3c6231d68eb30fd4ec1c1deb3830b13b36d3c4bae9ebf03c3d1380b0f79
MD5 264d1eb69bcce00fdf11a6a39472dd0a
SHA1 e466c80da7f961743681b6dbdae3eaa0756a4dcd
SHA512 f45a0da6d82081f787b385595c34a8abc6552d0e73dd393789f93a1b2910efc8ab413668d347726ae874c298c9c3ac458e7e422e98ad2bb3354b8c8563ecbed9
SSDEEP 12288:eMAIy7c3/N0NZab1USs2zwAmNOr7hXqs:qIy7cVqZabE2EAn7hXX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

425984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep CreateThread lstrlenW VirtualProtect GetProcAddress LoadLibraryA VirtualAlloc LockResource WaitForSingleObject SizeofResource FindResourceW GetModuleHandleW GetLastError CreateMutexA GetModuleHandleA EnumTimeFormatsW FreeConsole LoadResource MoveFileA GetCommandLineA SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

advapi32

RegDeleteKeyA

Sharing