b49d3b05754d98405c82e912ab6bf09d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b49d3b05754d98405c82e912ab6bf09d.exe
Size 238KB
Sample231019-klez1sfa2t
SHA256 2ceff65463ef3156fafaae4c327ac9f81a3d7540f6f44d16be2546ddabdcb6ab
MD5 b49d3b05754d98405c82e912ab6bf09d
SHA1 be4d86e1b9cdb2e95623384abe21eb8324970393
SHA512 0abce587d4e0007634b2fa9082085d4488ad9e80cb3343535e4a1b92185dc07641d27af28cb78f362938fa2540c9096e7506819ccdbf9d36161a363ab27464bd
SSDEEP 3072:IsX1Z/LtxhHBmyYgl7BLnP7hRBb9TwLqbQDLe57pV:51dLfhHBFYC79P7nBbSmQDcp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b49d3b05754d98405c82e912ab6bf09d.exe

File Explorer

b49d3b05754d98405c82e912ab6bf09d.exe

.exe 238KB

b49d3b05754d98405c82e912ab6bf09d.exe

IMPHASH 54d892e84f50f07e9ed8d05ddb3cff42
SHA256 2ceff65463ef3156fafaae4c327ac9f81a3d7540f6f44d16be2546ddabdcb6ab
MD5 b49d3b05754d98405c82e912ab6bf09d
SHA1 be4d86e1b9cdb2e95623384abe21eb8324970393
SHA512 0abce587d4e0007634b2fa9082085d4488ad9e80cb3343535e4a1b92185dc07641d27af28cb78f362938fa2540c9096e7506819ccdbf9d36161a363ab27464bd
SSDEEP 3072:IsX1Z/LtxhHBmyYgl7BLnP7hRBb9TwLqbQDLe57pV:51dLfhHBFYC79P7nBbSmQDcp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetComputerNameExA UpdateResourceA _lwrite SetConsoleTextAttribute GetCommState GetConsoleAliasA InterlockedCompareExchange WriteConsoleInputA CreateHardLinkA GetTickCount FormatMessageA GetDateFormatA GetPriorityClass GetVolumePathNameW WideCharToMultiByte FreeConsole SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW EnumSystemCodePagesA GetNamedPipeInfo FileTimeToSystemTime lstrlenW GetConsoleAliasesW InterlockedExchange FillConsoleOutputCharacterW GetLastError GetConsoleAliasExesA GetProcAddress VirtualAlloc PeekConsoleInputW BeginUpdateResourceW BackupWrite RemoveDirectoryA LoadLibraryA LocalAlloc SetCalendarInfoW GetNumberFormatW FoldStringW GetOEMCP FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect OpenSemaphoreW GetWindowsDirectoryW GlobalAddAtomW AddConsoleAliasA SetFileAttributesW CreateFileA WriteConsoleW GetConsoleOutputCP GetModuleHandleExA PeekNamedPipe FindFirstFileW FindVolumeClose FindResourceA SetLastError GetComputerNameA WriteConsoleA CloseHandle FlushFileBuffers GetConsoleMode UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc HeapSize SetHandleCount GetFileType GetStartupInfoA SetFilePointer TerminateProcess GetCurrentProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA RtlUnwind SetStdHandle GetConsoleCP

user32

GetWindowTextLengthA ChangeDisplaySettingsW LoadMenuA CharToOemBuffW

gdi32

GetCharWidthA GetCharABCWidthsFloatA GetBitmapDimensionEx

advapi32

SetKernelObjectSecurity RegOpenKeyA

shell32

ExtractAssociatedIconW

winhttp

WinHttpOpen WinHttpReadData