2128003C07B0ED1E597F1A393A549419[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2128003C07B0ED1E597F1A393A549419.exe
Size 231KB
Sample231021-zea5tabf64
SHA256 279920d9a47f105109d944756691daab21f7170b35fcca67e352b128e194bfbc
MD5 2128003c07b0ed1e597f1a393a549419
SHA1 4faf21058a5be51d472daf29cf68d9aebb0ddd12
SHA512 a4fe266a7171500a16961d0d0884200af540ef6717f6188f8e2332807251f56dfde430409d8e33aeff07124950481d73542069037f7e56cf65eb597cc8115885
SSDEEP 3072:q/bAZ+uAYqld2+Fe+aHZbrVllsVAsPwH/5XXKo:qbAZ+NntbW/lsVJ2pX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2128003C07B0ED1E597F1A393A549419.exe

File Explorer

2128003C07B0ED1E597F1A393A549419.exe

.exe 231KB

2128003C07B0ED1E597F1A393A549419.exe

IMPHASH 8b3011ba53b7e84f6ea65a7d8a93362f
SHA256 279920d9a47f105109d944756691daab21f7170b35fcca67e352b128e194bfbc
MD5 2128003c07b0ed1e597f1a393a549419
SHA1 4faf21058a5be51d472daf29cf68d9aebb0ddd12
SHA512 a4fe266a7171500a16961d0d0884200af540ef6717f6188f8e2332807251f56dfde430409d8e33aeff07124950481d73542069037f7e56cf65eb597cc8115885
SSDEEP 3072:q/bAZ+uAYqld2+Fe+aHZbrVllsVAsPwH/5XXKo:qbAZ+NntbW/lsVJ2pX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15579

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe SetComputerNameExA GetProcessIoCounters GetCurrentProcess SetComputerNameW SetVolumeMountPointW CreateHardLinkA FreeEnvironmentStringsA GetProcessPriorityBoost GetModuleHandleW GetTickCount GetWindowsDirectoryA GetCompressedFileSizeW GetVolumePathNameW LoadLibraryW SizeofResource GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetNamedPipeInfo GetFileAttributesW MultiByteToWideChar FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc GetConsoleAliasesLengthW BeginUpdateResourceW BackupWrite EnumSystemCodePagesW GlobalFree LoadLibraryA LocalAlloc GetNumberFormatW AddAtomW RemoveDirectoryW FoldStringA GetOEMCP FindNextFileA FindFirstChangeNotificationA FreeEnvironmentStringsW _lopen GlobalAddAtomW AddConsoleAliasA WriteConsoleW GetConsoleOutputCP WriteConsoleA WriteConsoleOutputCharacterW WriteConsoleInputW PeekConsoleInputW SetDefaultCommConfigA ReadFile GetProcessHeap SetEndOfFile HeapFree GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess RtlUnwind WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP IsValidCodePage CloseHandle CreateFileA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer

user32

ChangeDisplaySettingsA GetWindowTextLengthW CharToOemBuffA LoadMenuA

gdi32

GetCharABCWidthsFloatA GetBitmapDimensionEx

advapi32

RegOpenKeyA

shell32

ExtractAssociatedIconW

ole32

StringFromIID