e9f5cf469606763d6ad1944875076e4d[.]exe

General

Target
e9f5cf469606763d6ad1944875076e4d.exe
Size 343KB
Sample231005-wgaehsfe46
SHA256 8cf2e3fd2a1f2522870ac61dc4496433c9700b389768d4b6ef75e905cf5f3421
MD5 e9f5cf469606763d6ad1944875076e4d
SHA1 c845dabbf481f0f660ce3c60142de67c74e62f2f
SHA512 735c93d73575e3af5def842cc62ffa76dd3b4c194e12a81655ccceb1b8f2fe4403153f69fa12c04b149cc37924e725bb4e1752eabd2e450f29651257f022af41
SSDEEP 6144:xwFsojeNfFp7kHDVlGwPyoSFmJYvZ0izMkNbcWn7txUWN7aSi:8sYeNz+lVq1ii5NbF0WRQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9f5cf469606763d6ad1944875076e4d.exe

File Explorer

e9f5cf469606763d6ad1944875076e4d.exe

.exe 343KB

e9f5cf469606763d6ad1944875076e4d.exe

IMPHASH 046dfae6c2280fbc36820b8f28604732
SHA256 8cf2e3fd2a1f2522870ac61dc4496433c9700b389768d4b6ef75e905cf5f3421
MD5 e9f5cf469606763d6ad1944875076e4d
SHA1 c845dabbf481f0f660ce3c60142de67c74e62f2f
SHA512 735c93d73575e3af5def842cc62ffa76dd3b4c194e12a81655ccceb1b8f2fe4403153f69fa12c04b149cc37924e725bb4e1752eabd2e450f29651257f022af41
SSDEEP 6144:xwFsojeNfFp7kHDVlGwPyoSFmJYvZ0izMkNbcWn7txUWN7aSi:8sYeNz+lVq1ii5NbF0WRQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange AddConsoleAliasW _lclose GetTickCount GetNumberFormatA GetWindowsDirectoryA SetProcessPriorityBoost GlobalAlloc LoadLibraryW SetVolumeMountPointA GetSystemWindowsDirectoryA GetFileAttributesW GetCompressedFileSizeA CreateActCtxA GetACP FillConsoleOutputCharacterW SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc BeginUpdateResourceW RemoveDirectoryA EnumSystemCodePagesW SetComputerNameA _hwrite LoadResource AddAtomW BeginUpdateResourceA GetCommMask FoldStringA GlobalFindAtomW OpenFileMappingW FreeEnvironmentStringsW FindNextFileW VirtualProtect PeekConsoleInputA EndUpdateResourceA ReadConsoleInputW TerminateJobObject GetCurrentProcessId LocalFree FindNextVolumeA GetProcessHeap SetEndOfFile FlushFileBuffers PeekNamedPipe CreateHardLinkW WriteConsoleW GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree RaiseException GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize EnterCriticalSection LeaveCriticalSection RtlUnwind ReadFile DeleteCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc GetModuleHandleA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA SetStdHandle WriteConsoleA

user32

ChangeDisplaySettingsA CharToOemBuffA PostMessageW GetWindowTextLengthA LoadMenuW

gdi32

GetCharacterPlacementA GetPolyFillMode

ole32

CoMarshalHresult

Sharing