fdecf68472f480ac2e63749790abe7ef[.]exe

General

Target
fdecf68472f480ac2e63749790abe7ef.exe
Size 293KB
Sample231006-p6b63sbf6s
SHA256 bd6bd7cf8acf51a6cb03c0717559ee431e1549e504d4ed16d3fbbaea55803e28
MD5 fdecf68472f480ac2e63749790abe7ef
SHA1 13a7fefa92baf71db4c3e301de967dbe8fe1b91b
SHA512 328320451442744984edcfffa6cc6c33e4b6e00a8e4dcce107d9eb12ed3fd2131c0d57313010a64e9d14a3f1dc052a392329d0d4365ea174ed04f4c0beedbbc3
SSDEEP 3072:ZQkRnkRV6BM887MZQNx2QurmGoOO5yEyXfhpk5hb+ot:Z5+RIM88oQP2QK1VEwfhWhqo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdecf68472f480ac2e63749790abe7ef.exe

File Explorer

fdecf68472f480ac2e63749790abe7ef.exe

.exe 293KB

fdecf68472f480ac2e63749790abe7ef.exe

IMPHASH d94d460f94e7da5b5adad847243e56fc
SHA256 bd6bd7cf8acf51a6cb03c0717559ee431e1549e504d4ed16d3fbbaea55803e28
MD5 fdecf68472f480ac2e63749790abe7ef
SHA1 13a7fefa92baf71db4c3e301de967dbe8fe1b91b
SHA512 328320451442744984edcfffa6cc6c33e4b6e00a8e4dcce107d9eb12ed3fd2131c0d57313010a64e9d14a3f1dc052a392329d0d4365ea174ed04f4c0beedbbc3
SSDEEP 3072:ZQkRnkRV6BM887MZQNx2QurmGoOO5yEyXfhpk5hb+ot:Z5+RIM88oQP2QK1VEwfhWhqo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetModuleHandleExA GetLocaleInfoA GetConsoleAliasExesA CommConfigDialogA FindResourceW BuildCommDCBAndTimeoutsA EnumCalendarInfoW InterlockedDecrement SetDefaultCommConfigW QueryPerformanceCounter GetNamedPipeHandleStateA GetEnvironmentStringsW WriteConsoleInputA GetComputerNameW OpenSemaphoreA SetCommBreak CreateHardLinkA FreeEnvironmentStringsA SetTapeParameters FindNextVolumeMountPointA ConvertFiberToThread ReadConsoleW WaitNamedPipeW EnumTimeFormatsA WriteFile EnumTimeFormatsW GetCommandLineA GetDriveTypeA GetEnvironmentStrings FindResourceExA LoadLibraryW GetConsoleMode CopyFileW GetCalendarInfoA IsBadCodePtr SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList GetFileAttributesA EnumSystemCodePagesA WriteConsoleInputW GetAtomNameW GetCompressedFileSizeA GetACP GetVolumePathNameA GetStartupInfoW CreateMailslotW DisconnectNamedPipe GetShortPathNameA GetConsoleAliasesW InterlockedExchange GetLastError IsDBCSLeadByteEx SetLastError ReadConsoleOutputCharacterA PeekConsoleInputW EnumSystemCodePagesW SetComputerNameA FindClose LoadLibraryA InterlockedExchangeAdd LocalAlloc SetConsoleCtrlHandler AddAtomW RemoveDirectoryW HeapWalk OpenJobObjectW GetPrivateProfileSectionNamesA EnumDateFormatsA GetModuleHandleA FindNextFileW GetStringTypeW VirtualProtect SetCalendarInfoA FindFirstVolumeA ReadConsoleInputW GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId AddConsoleAliasA ReadConsoleOutputCharacterW CreateFileW ReadFile WriteConsoleW SetSystemPowerState GetTempFileNameW MoveFileA HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation RaiseException IsProcessorFeaturePresent EncodePointer HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetModuleFileNameW SetFilePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCPInfo GetOEMCP IsValidCodePage CloseHandle FreeEnvironmentStringsW GetTickCount GetSystemTimeAsFileTime Sleep WideCharToMultiByte GetConsoleCP RtlUnwind SetStdHandle FlushFileBuffers MultiByteToWideChar HeapSize LCMapStringW DeleteFileA

user32

CharUpperBuffA CharUpperA

gdi32

GetKerningPairsA

Sharing