0b728902f11799589af4885314220911[.]exe

General

Target
0b728902f11799589af4885314220911.exe
Size 618KB
Sample231009-kapebabe6t
SHA256 290d08a225c119c8f15726194c9dc0a9ba279d2c7555ffac1cff6cee56dd2ace
MD5 0b728902f11799589af4885314220911
SHA1 38536cbb276ac6e55e10945ecdd9dbc3133d494b
SHA512 52d7a3e67c20a4d0266004ff2574b037a0a234b36db7fda2e5bf986372527b55e79aaee96b72531974e0a5ff710bc9c3cc430886138aecb558aa89f894ed8ff5
SSDEEP 12288:MvTuPe3u197jZyWxLeYWWFLEMTdxjOd8gakXel9lK8xeBWa:MvTie3uvWILEMTdxj1QYK8xg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b728902f11799589af4885314220911.exe

File Explorer

0b728902f11799589af4885314220911.exe

.exe 618KB

0b728902f11799589af4885314220911.exe

IMPHASH c3622f0dbb85686f6d23a475197b30c3
SHA256 290d08a225c119c8f15726194c9dc0a9ba279d2c7555ffac1cff6cee56dd2ace
MD5 0b728902f11799589af4885314220911
SHA1 38536cbb276ac6e55e10945ecdd9dbc3133d494b
SHA512 52d7a3e67c20a4d0266004ff2574b037a0a234b36db7fda2e5bf986372527b55e79aaee96b72531974e0a5ff710bc9c3cc430886138aecb558aa89f894ed8ff5
SSDEEP 12288:MvTuPe3u197jZyWxLeYWWFLEMTdxjOd8gakXel9lK8xeBWa:MvTie3uvWILEMTdxj1QYK8xg
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

24467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedCompareExchange AddConsoleAliasW _lclose GetTickCount GetNumberFormatA SetProcessPriorityBoost GlobalAlloc LoadLibraryW ReadConsoleInputA AssignProcessToJobObject SetVolumeMountPointA GetSystemWindowsDirectoryA FindNextVolumeW GetFileAttributesW GetCompressedFileSizeA CreateActCtxA SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW RemoveDirectoryA EnumSystemCodePagesW LoadResource GlobalFree CreateHardLinkW BeginUpdateResourceA GetCommMask FoldStringA GlobalFindAtomW FindNextFileA OpenFileMappingW FreeEnvironmentStringsW PeekConsoleInputA FindAtomW GetWindowsDirectoryW GetCurrentProcessId ReadConsoleOutputCharacterW ReadFile GetProcessHeap SetEndOfFile GetCPInfo PeekNamedPipe SetComputerNameA FillConsoleOutputCharacterA MultiByteToWideChar GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree WideCharToMultiByte SetHandleCount GetStdHandle GetFileType DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize RtlUnwind WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc GetModuleHandleA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

user32

CharToOemBuffA PostMessageW LoadMenuW ChangeDisplaySettingsA GetWindowTextLengthW

gdi32

GetPolyFillMode GetCharacterPlacementW

advapi32

BackupEventLogW

Sharing