c14293904116ecf16d85fc0656fa9ec2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
c14293904116ecf16d85fc0656fa9ec2.exe
Size 1.6MB
Sample231007-jbs88acb28
SHA256 3f57344f1e9e5cbd8af2a623c444cbc6b5bc3d94bbe56ddaf22f0068acb13ec9
MD5 c14293904116ecf16d85fc0656fa9ec2
SHA1 ab3ea5eb854351ac1a465849582b2d925f360718
SHA512 345a989033abdd45b8d6b7b14d573fa0c15112650ef668556c0a53cb7f5547bbe858e9bfd1c78b20bd426ce447f4b84bcf9a8d098a83ee4ba8b75e23b7123ee9
SSDEEP 24576:wH4G8P8VYPjxxT6qrkVFUrFrg+tsaBS/wRPtNZ/pqhi7fR3YM8LRMz50lw:vG8P8VYrmzaBS/wRpxfRz8LRMmlw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c14293904116ecf16d85fc0656fa9ec2.exe

File Explorer

c14293904116ecf16d85fc0656fa9ec2.exe

.exe 1.6MB

c14293904116ecf16d85fc0656fa9ec2.exe

IMPHASH a638f6b413d02de0f382750aa46eeb04
SHA256 3f57344f1e9e5cbd8af2a623c444cbc6b5bc3d94bbe56ddaf22f0068acb13ec9
MD5 c14293904116ecf16d85fc0656fa9ec2
SHA1 ab3ea5eb854351ac1a465849582b2d925f360718
SHA512 345a989033abdd45b8d6b7b14d573fa0c15112650ef668556c0a53cb7f5547bbe858e9bfd1c78b20bd426ce447f4b84bcf9a8d098a83ee4ba8b75e23b7123ee9
SSDEEP 24576:wH4G8P8VYPjxxT6qrkVFUrFrg+tsaBS/wRPtNZ/pqhi7fR3YM8LRMz50lw:vG8P8VYrmzaBS/wRpxfRz8LRMmlw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

269552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ExitProcess VirtualProtect VirtualQuery SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree FlsAlloc HeapSetInformation HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW InitializeCriticalSectionAndSpinCount GetTimeZoneInformation LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA HeapQueryInformation RtlPcToFileHeader RaiseException RtlUnwindEx RtlLookupFunctionEntry HeapReAlloc GetStartupInfoW GetFileTime GetFileSizeEx GetFileAttributesW FileTimeToLocalFileTime SetErrorMode GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer lstrcmpiW GetStringTypeExW FileTimeToSystemTime GetThreadLocale TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW GetLocaleInfoW CompareStringA WritePrivateProfileStringW GetPrivateProfileIntW GlobalFlags GlobalGetAtomNameW lstrlenA lstrcmpA GetCurrentProcessId WideCharToMultiByte FormatMessageW LocalFree lstrlenW CompareStringW LoadLibraryA lstrcmpW MultiByteToWideChar GetVersionExA ExitThread ReadFile GetFileSize CreateProcessW GetShortPathNameW CreateThread TerminateProcess SetPriorityClass GetPriorityClass Sleep HeapAlloc GetProcessHeap HeapFree GetWindowsDirectoryW GetCurrentProcess GetModuleFileNameW GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetCurrentThreadId GetTickCount GetLastError SetLastError MulDiv GetVersionExW GetVersion FreeLibrary GetProcAddress LoadLibraryW FreeResource GetModuleHandleW IsBadReadPtr ReadProcessMemory FindResourceW LoadResource LockResource SizeofResource VirtualQueryEx GetSystemInfo OpenProcess WriteFile GlobalFree GlobalUnlock GlobalLock GlobalAlloc VirtualFree VirtualAlloc CloseHandle CreateFileW RtlCaptureContext

user32

PostQuitMessage MapDialogRect SetWindowContextHelpId ShowOwnedPopups GetSysColorBrush UnregisterClassW CharUpperW CharNextW InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatW PostThreadMessageW GetMenuCheckMarkDimensions EnableMenuItem CheckMenuItem RegisterWindowMessageW SendDlgItemMessageA SendDlgItemMessageW WinHelpW GetCapture GetClassLongPtrW GetForegroundWindow GetLastActivePopup BeginDeferWindowPos EndDeferWindowPos GetTopWindow GetMessageTime PeekMessageW MapWindowPoints TrackPopupMenu GetKeyState UpdateWindow MessageBoxW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetDlgCtrlID SetWindowLongW SystemParametersInfoA GetWindowTextLengthW GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow GetDlgItem GetNextDlgTabItem PostMessageW EnumChildWindows IsWindowEnabled GetWindowTextW EnumWindows GetWindowThreadProcessId SetForegroundWindow TranslateMDISysAccel DrawIcon IsIconic SetRectEmpty ReleaseCapture SetFocus SetCapture PtInRect GetCursorPos IsChild GetFocus MenuItemFromPoint EndPaint BeginPaint ValidateRect DefWindowProcW DrawMenuBar SetMenu DestroyMenu CallNextHookEx SetPropW GetClassNameW CallWindowProcW RemovePropW GetPropW UnhookWindowsHookEx SetWindowsHookExW KillTimer SetLayeredWindowAttributes SetWindowLongPtrW IntersectRect CreatePopupMenu DeleteMenu RedrawWindow ClientToScreen IsRectEmpty GetMenuState LoadMenuW GetDesktopWindow ModifyMenuW AppendMenuW GetMenuDefaultItem DrawFocusRect DrawEdge GetMessagePos TabbedTextOutW DrawTextW DrawTextExW GrayStringW InflateRect DrawStateW DefMDIChildProcW DefFrameProcW UnpackDDElParam ReuseDDElParam GetMenuItemID GetSubMenu GetSystemMenu GetMenu WindowFromDC GetMenuInfo GetKeyNameTextW MapVirtualKeyW CopyAcceleratorTableW DestroyIcon GetIconInfo CopyImage FillRect GetWindowLongPtrW OffsetRect GetWindowRect InsertMenuItemW BringWindowToTop TranslateAcceleratorW LoadAcceleratorsW WindowFromPoint GetMenuStringW SystemParametersInfoW GetMenuItemInfoW GetMenuItemRect SetMenuInfo IsMenu GetWindowDC IsWindowVisible SetMenuItemBitmaps GetMenuItemCount GetWindowLongW GetSystemMetrics CopyRect SetRect LoadBitmapW SetTimer SetWindowPlacement GetWindowPlacement MoveWindow GetWindow IsDialogMessageW IsWindow GetMessageW ShowWindow SetWindowTextW CreateDialogParamW EndDialog InvalidateRect TrackMouseEvent SetCursor ShowCursor GetSysColor LoadCursorW SetDlgItemTextW GetParent GetDlgItemTextW LoadIconW ReleaseDC GetDC wsprintfW GetClientRect SetWindowPos CreateWindowExW SendMessageW EnableWindow DispatchMessageW TranslateMessage SetParent

gdi32

GetViewportExtEx GetWindowExtEx SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx LineTo ExtSelectClipRgn GetStockObject GetMapMode GetBkColor GetRgnBox ExcludeClipRect IntersectClipRect SetMapMode SetBkMode RestoreDC SaveDC SetTextColor GetClipBox PatBlt DPtoLP SelectClipRgn CreateRectRgnIndirect CombineRgn DeleteObject SetBrushOrgEx UnrealizeObject Rectangle PtVisible RectVisible Escape RoundRect GetNearestColor SetWindowOrgEx CreateSolidBrush CreatePatternBrush CreateCompatibleBitmap GetTextColor GetCurrentPositionEx GetTextExtentPointW ExtTextOutW MoveToEx SetTextAlign GetLayout CreateFontIndirectW GetTextMetricsW GetTextAlign GetCurrentObject SetPixel GetPixel SetBkColor CreateBitmap GetObjectW GetDeviceCaps TextOutW GetTextExtentPoint32W CreatePen CreateFontW DeleteDC BitBlt SelectObject CreateCompatibleDC CreateRectRgn

comdlg32

GetSaveFileNameW GetFileTitleW

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegSetValueExW RegCloseKey RegDeleteKeyW OpenProcessToken RegQueryValueW RegOpenKeyW RegEnumKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW AdjustTokenPrivileges LookupPrivilegeValueW

shell32

ShellExecuteExW ShellExecuteW SHGetFileInfoW DragFinish DragQueryFileW

comctl32

ImageList_GetIconSize ImageList_Create ImageList_Add InitCommonControlsEx ImageList_Destroy

shlwapi

PathFindExtensionW PathStripToRootW PathIsUNCW PathFindFileNameW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString OleFlushClipboard CoTaskMemAlloc CoTaskMemFree CoRegisterMessageFilter CoRevokeClassObject OleIsCurrentClipboard CLSIDFromProgID

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysFreeString

psapi

EnumProcesses GetModuleInformation GetModuleFileNameExW EnumProcessModules

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW