457348f3ec34386219573e4a7f79e0aa[.]exe

General

Target
457348f3ec34386219573e4a7f79e0aa.exe
Size 265KB
Sample231012-2wntcafh92
SHA256 884b271a95ee712dd2d9e89e5c0ef4df5d712f71d16463d4aa09748fb3d39410
MD5 457348f3ec34386219573e4a7f79e0aa
SHA1 be1fb32c81ad6b41571f1d6ab33e767e9e2e9de7
SHA512 7c81bc71749afb3557c1cab27c618b4027d5afbaf2d5adc44a07b64776dc3fef5854a9a6bfcd022ea73b09729ae3ef7f702da90ba63f0122e8e31afdf4e203a4
SSDEEP 3072:dBNotmy2o0kYakAoGcJudJJEDni+qHRlG:jat2o0kNhoG1DJEDi+q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
457348f3ec34386219573e4a7f79e0aa.exe

File Explorer

457348f3ec34386219573e4a7f79e0aa.exe

.exe 265KB

457348f3ec34386219573e4a7f79e0aa.exe

IMPHASH b4164898143d8dc833316486e3ec834f
SHA256 884b271a95ee712dd2d9e89e5c0ef4df5d712f71d16463d4aa09748fb3d39410
MD5 457348f3ec34386219573e4a7f79e0aa
SHA1 be1fb32c81ad6b41571f1d6ab33e767e9e2e9de7
SHA512 7c81bc71749afb3557c1cab27c618b4027d5afbaf2d5adc44a07b64776dc3fef5854a9a6bfcd022ea73b09729ae3ef7f702da90ba63f0122e8e31afdf4e203a4
SSDEEP 3072:dBNotmy2o0kYakAoGcJudJJEDni+qHRlG:jat2o0kNhoG1DJEDi+q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

22707

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA GetConsoleAliasesLengthW GetLocaleInfoA GetConsoleAliasExesA CommConfigDialogA FindResourceW BuildCommDCBAndTimeoutsA MapUserPhysicalPages OpenJobObjectA ReadConsoleA InterlockedDecrement QueryPerformanceCounter GetEnvironmentStringsW GetModuleHandleExW WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA SetThreadUILanguage FindNextVolumeMountPointA ConvertFiberToThread GetWindowsDirectoryA GetCompressedFileSizeW WaitNamedPipeW EnumTimeFormatsA WriteFile GetCommandLineA GetDriveTypeA GetEnvironmentStrings FindResourceExA GetConsoleCP LoadLibraryW GetConsoleMode ReadConsoleInputA SetConsoleCP DeleteVolumeMountPointW EnumSystemCodePagesA GetFileAttributesW SetSystemPowerState GetAtomNameW GetComputerNameA GetACP GetVolumePathNameA GetStartupInfoW GetNamedPipeHandleStateW GetConsoleAliasesW FindFirstFileA OpenMutexW GetLastError SetLastError PeekConsoleInputW VerLanguageNameA SetVolumeLabelW HeapUnlock MoveFileW CopyFileA GetTempFileNameA FindClose LoadLibraryA LocalAlloc CreateHardLinkW AddAtomW RemoveDirectoryW SetCommMask GetTapeParameters FoldStringW GetPrivateProfileSectionNamesA FindNextFileA GetModuleHandleA GetStringTypeW GetConsoleTitleW VirtualProtect FatalAppExitA GetShortPathNameW SetCalendarInfoA OpenSemaphoreW FindFirstVolumeW ReadConsoleOutputCharacterW DeleteFileA FlushFileBuffers SetStdHandle SetFilePointer CreateFileW GetVolumeNameForVolumeMountPointA MoveFileA HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer WideCharToMultiByte HeapReAlloc GetCommandLineW HeapSetInformation IsProcessorFeaturePresent HeapCreate GetStdHandle GetModuleFileNameW EncodePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCPInfo GetOEMCP IsValidCodePage SetHandleCount GetFileType CloseHandle FreeEnvironmentStringsW GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize RtlUnwind LCMapStringW MultiByteToWideChar RaiseException WriteConsoleW

user32

CharUpperBuffA CharUpperW

gdi32

GetTextFaceA

winhttp

WinHttpReadData

Sharing