3059a8f7e4b873219bc3dc4d510e936a[.]exe

General

Target
3059a8f7e4b873219bc3dc4d510e936a.exe
Size 253KB
Sample231024-g68ahsbb8s
SHA256 d8325ea2e2cf9ed8277a8fc3afbcc56f2845f0f2db3b8cbbc29a59be96880210
MD5 3059a8f7e4b873219bc3dc4d510e936a
SHA1 d154d0b3d8054323d04c8e8284d888e73e2dbb03
SHA512 73ce77142c1c2ecf6935ffc69260ae15c41fdb64470f229753c557d2ab9928191b5f4ae79a8645fdb91dfcfda0d1f08771cdc728356b7128ea65ab7f796dfa8e
SSDEEP 3072:WwX3qh64T1LF3Op17UgIGgyvQqOV8Ta3ojGB6WtRdG7sY25kRtMp8frA:jaU4T1Llc17zIGg2I8u3NtDuRc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3059a8f7e4b873219bc3dc4d510e936a.exe

File Explorer

3059a8f7e4b873219bc3dc4d510e936a.exe

.exe 253KB

3059a8f7e4b873219bc3dc4d510e936a.exe

IMPHASH 780437e8c81fd22a5669fb9201842564
SHA256 d8325ea2e2cf9ed8277a8fc3afbcc56f2845f0f2db3b8cbbc29a59be96880210
MD5 3059a8f7e4b873219bc3dc4d510e936a
SHA1 d154d0b3d8054323d04c8e8284d888e73e2dbb03
SHA512 73ce77142c1c2ecf6935ffc69260ae15c41fdb64470f229753c557d2ab9928191b5f4ae79a8645fdb91dfcfda0d1f08771cdc728356b7128ea65ab7f796dfa8e
SSDEEP 3072:WwX3qh64T1LF3Op17UgIGgyvQqOV8Ta3ojGB6WtRdG7sY25kRtMp8frA:jaU4T1Llc17zIGg2I8u3NtDuRc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

30063

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA GlobalAddAtomA GetCommState GetConsoleAliasA GetTickCount ReadDirectoryChangesW GetWindowsDirectoryA GetVolumePathNameW WideCharToMultiByte LoadLibraryW ReadConsoleInputA FreeConsole GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW EnumSystemCodePagesA IsProcessorFeaturePresent SetComputerNameExW GetConsoleAliasesW InterlockedExchange FillConsoleOutputCharacterW GetLastError SetLastError BackupRead GetProcAddress FindResourceExW PeekConsoleInputW CreateNamedPipeA RemoveDirectoryA LocalAlloc SetConsoleCtrlHandler GetNumberFormatW RemoveDirectoryW FoldStringW GetOEMCP DebugSetProcessKillOnExit GetModuleHandleA UpdateResourceW FreeEnvironmentStringsW VirtualProtect AddConsoleAliasA SetFileAttributesW LocalFileTimeToFileTime CreateFileA WriteConsoleW PeekNamedPipe FindFirstFileW VirtualAlloc SetPriorityClass GetConsoleOutputCP WriteConsoleA HeapFree GetModuleHandleW Sleep ExitProcess GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc HeapSize MultiByteToWideChar ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle

user32

LoadMenuW CharToOemBuffW ChangeDisplaySettingsA

gdi32

GetCharWidthA GetCharABCWidthsFloatA GetBitmapDimensionEx

ole32

StringFromIID

Sharing