b5c0e1a9256d2f592e3fcac9302eaa26[.]exe

General

Target
b5c0e1a9256d2f592e3fcac9302eaa26.exe
Size 265KB
Sample231012-r2e4aage34
SHA256 119e903551a459831af73657fa4478655a8a94febcfbb5f82be19781cdc4a123
MD5 b5c0e1a9256d2f592e3fcac9302eaa26
SHA1 d9af2e07d01c16074428e6715b88f1b7ed3242dd
SHA512 f6d3e998685b2fa1b66cbff05f8cda1b8c8c0918ac623657cf4e4f34480da13a713cedfb1d4709e50ba91fd6661229df11f0ad716c4472312388968c18aa659a
SSDEEP 3072:LjBNZFrvnIPaYv6tF83IbtOIwZMO9uppjVTDUbTmuwzB:RBrvnIPaYv6tF83EtFcMO0ppjRDU/m
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5c0e1a9256d2f592e3fcac9302eaa26.exe

File Explorer

b5c0e1a9256d2f592e3fcac9302eaa26.exe

.exe 265KB

b5c0e1a9256d2f592e3fcac9302eaa26.exe

IMPHASH 88436ff6acbe52a381a5371266c10c19
SHA256 119e903551a459831af73657fa4478655a8a94febcfbb5f82be19781cdc4a123
MD5 b5c0e1a9256d2f592e3fcac9302eaa26
SHA1 d9af2e07d01c16074428e6715b88f1b7ed3242dd
SHA512 f6d3e998685b2fa1b66cbff05f8cda1b8c8c0918ac623657cf4e4f34480da13a713cedfb1d4709e50ba91fd6661229df11f0ad716c4472312388968c18aa659a
SSDEEP 3072:LjBNZFrvnIPaYv6tF83IbtOIwZMO9uppjVTDUbTmuwzB:RBrvnIPaYv6tF83EtFcMO0ppjRDU/m
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23059

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempFileNameW SetVolumeLabelA SetDefaultCommConfigA GetConsoleAliasesLengthW GetModuleHandleExA GetLocaleInfoA GetConsoleAliasExesA CommConfigDialogA FindResourceExW FindResourceW MapUserPhysicalPages OpenJobObjectA ReadConsoleA InterlockedDecrement QueryPerformanceCounter GetEnvironmentStringsW WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA SetTapeParameters SetThreadUILanguage ConvertFiberToThread GetConsoleTitleA GetWindowsDirectoryA GetCompressedFileSizeW WaitNamedPipeW EnumTimeFormatsA WriteFile GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetConsoleCP LoadLibraryW GetConsoleMode ReadConsoleInputA DeleteVolumeMountPointW EnumSystemCodePagesA GetFileAttributesW GetComputerNameA GetAtomNameW CreateFileW GetVolumePathNameA FindNextVolumeMountPointW GetStartupInfoW GetNamedPipeHandleStateW GetConsoleAliasesW FindFirstFileA GetLastError SetLastError HeapUnlock CopyFileA FindClose LoadLibraryA LocalAlloc MoveFileA BuildCommDCBAndTimeoutsW CreateHardLinkW RemoveDirectoryW GetCommMask AddAtomA FoldStringW GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA GetModuleHandleA GetStringTypeW VirtualProtect QueryPerformanceFrequency FatalAppExitA PeekConsoleInputA GetShortPathNameW SetCalendarInfoA OpenSemaphoreW FindFirstVolumeW ReadConsoleOutputCharacterW DeleteFileA FlushFileBuffers SetStdHandle SetSystemPowerState GetVolumeNameForVolumeMountPointA HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer WideCharToMultiByte HeapReAlloc GetCommandLineW HeapSetInformation IsProcessorFeaturePresent HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleFileNameW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCPInfo GetACP IsValidCodePage CloseHandle FreeEnvironmentStringsW GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer RtlUnwind HeapSize LCMapStringW MultiByteToWideChar RaiseException WriteConsoleW

user32

CharUpperBuffA CharUpperW

gdi32

GetTextFaceA

winhttp

WinHttpReadData

Sharing