5a48a6f9fe074f5092674c80b4038df0[.]exe

General

Target
5a48a6f9fe074f5092674c80b4038df0.exe
Size 604KB
Sample231006-rjed2acf2x
SHA256 4500f0d2feadf7c3f582442aad4d48bdd61c5e915827b0212d528d720fe2cc6e
MD5 5a48a6f9fe074f5092674c80b4038df0
SHA1 f7f617a2d48fc85b004b21f21e2807d341b41a53
SHA512 118745074fae9219446f62cb09295925b67de71bdf968f4f12ec5c80eab71b25a98c6b784ef12657ec4d2b895cf42a70c74c2d553f6de9e7e8dbb219129340c6
SSDEEP 12288:Vzqv/FttWebM83WjFB2K1fH+iUYQ3woF1BZBfwBLb/F2:Ve/jYeWjFPKV3woF1LBSL7A
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a48a6f9fe074f5092674c80b4038df0.exe

File Explorer

5a48a6f9fe074f5092674c80b4038df0.exe

.exe 604KB

5a48a6f9fe074f5092674c80b4038df0.exe

IMPHASH 17f811fb9fbb291d9e14d743b9df3fe7
SHA256 4500f0d2feadf7c3f582442aad4d48bdd61c5e915827b0212d528d720fe2cc6e
MD5 5a48a6f9fe074f5092674c80b4038df0
SHA1 f7f617a2d48fc85b004b21f21e2807d341b41a53
SHA512 118745074fae9219446f62cb09295925b67de71bdf968f4f12ec5c80eab71b25a98c6b784ef12657ec4d2b895cf42a70c74c2d553f6de9e7e8dbb219129340c6
SSDEEP 12288:Vzqv/FttWebM83WjFB2K1fH+iUYQ3woF1BZBfwBLb/F2:Ve/jYeWjFPKV3woF1LBSL7A
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW GetConsoleAliasesLengthW GetModuleHandleExA GetLocaleInfoA GetConsoleAliasExesA CommConfigDialogA FindResourceW BuildCommDCBAndTimeoutsA EnumCalendarInfoW InterlockedDecrement SetDefaultCommConfigW QueryPerformanceCounter GetNamedPipeHandleStateA WriteConsoleInputA GetComputerNameW OpenSemaphoreA SetCommBreak FreeEnvironmentStringsA GenerateConsoleCtrlEvent FindNextVolumeMountPointA ConvertFiberToThread ReadConsoleW GetCompressedFileSizeW WaitNamedPipeW EnumTimeFormatsA EnumTimeFormatsW GetCommandLineA GetDriveTypeA GetEnvironmentStrings FindResourceExA LoadLibraryW GetConsoleMode GetCalendarInfoA IsBadCodePtr SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList GetFileAttributesA EnumSystemCodePagesA SetSystemPowerState GetAtomNameW GetTempFileNameW GetVolumePathNameA GetStartupInfoW CreateMailslotW DisconnectNamedPipe FlushFileBuffers GetShortPathNameA GetConsoleAliasesW InterlockedExchange GetLastError IsDBCSLeadByteEx SetLastError ReadConsoleOutputCharacterA PeekConsoleInputW MoveFileW EnumSystemCodePagesW SetComputerNameA FindClose LoadLibraryA InterlockedExchangeAdd LocalAlloc CreateHardLinkW AddAtomW RemoveDirectoryW HeapWalk OpenJobObjectW GetTapeParameters GetPrivateProfileSectionNamesA EnumDateFormatsA GetModuleHandleA FindNextFileW GetStringTypeW VirtualProtect SetCalendarInfoA FindFirstVolumeA ReadConsoleInputW GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId AddConsoleAliasA ReadConsoleOutputCharacterW CreateFileW ReadFile WriteConsoleW GetACP GetCommandLineW MoveFileA HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer HeapReAlloc HeapSetInformation RaiseException IsProcessorFeaturePresent EncodePointer HeapCreate WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCPInfo GetOEMCP IsValidCodePage CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetSystemTimeAsFileTime Sleep SetStdHandle WideCharToMultiByte GetConsoleCP RtlUnwind MultiByteToWideChar HeapSize LCMapStringW DeleteFileA

user32

CharUpperBuffA CharUpperA

gdi32

GetKerningPairsA

Sharing