cf5cb731825863750c4b86a3df164db7[.]exe

General

Target
cf5cb731825863750c4b86a3df164db7.exe
Size 254KB
Sample231106-khkfbsbf42
SHA256 da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5
MD5 cf5cb731825863750c4b86a3df164db7
SHA1 044889a9bb37f16cc09c6217006e74c1b6aba492
SHA512 d8345f6cf580d1d29998e2b54facb82807e07a0a03539475e4bf7b8d21e91d60117057a28220d0f033f8c2c9ce36b3143ae511d639a7f446064c0cf32e9f6163
SSDEEP 3072:NFRbzeTt7LnZ+TCUOM6qvzPOGQbFvSlnjWQYtJ4oEKq5X//lV17:XRbzep7LnoT/OxyTPIvSpS7tJC/vp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf5cb731825863750c4b86a3df164db7.exe

File Explorer

cf5cb731825863750c4b86a3df164db7.exe

.exe 254KB

cf5cb731825863750c4b86a3df164db7.exe

IMPHASH 105a7720394e63394e65284a3456719d
SHA256 da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5
MD5 cf5cb731825863750c4b86a3df164db7
SHA1 044889a9bb37f16cc09c6217006e74c1b6aba492
SHA512 d8345f6cf580d1d29998e2b54facb82807e07a0a03539475e4bf7b8d21e91d60117057a28220d0f033f8c2c9ce36b3143ae511d639a7f446064c0cf32e9f6163
SSDEEP 3072:NFRbzeTt7LnZ+TCUOM6qvzPOGQbFvSlnjWQYtJ4oEKq5X//lV17:XRbzep7LnoT/OxyTPIvSpS7tJC/vp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

27908

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW SetComputerNameExA GetConsoleAliasExesLengthA FindResourceW DeleteVolumeMountPointA GlobalAddAtomA GetCommState GetSystemWindowsDirectoryW AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW GetTickCount CreateNamedPipeW GetConsoleAliasesA GetPriorityClass GetCurrencyFormatW LoadLibraryW GetExitCodeProcess IsProcessorFeaturePresent GetConsoleAliasW lstrcatA GetVolumePathNameA GetConsoleAliasesW GetLastError InterlockedFlushSList SetLastError GetProcAddress VirtualAlloc FindFirstFileW EnumSystemCodePagesW SearchPathA SetFileAttributesA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc BuildCommDCBAndTimeoutsW GetNumberFormatW RemoveDirectoryW SetConsoleWindowInfo FoldStringW GlobalFindAtomW DebugSetProcessKillOnExit QueryMemoryResourceNotification UpdateResourceW VirtualProtect PeekConsoleInputA ReadConsoleInputW GetWindowsDirectoryW AreFileApisANSI LocalFileTimeToFileTime CloseHandle WriteConsoleW CreateFileA SetVolumeLabelA FillConsoleOutputCharacterA BackupWrite GetConsoleOutputCP WriteConsoleA HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA HeapSize SetHandleCount GetFileType GetStartupInfoA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

user32

ChangeDisplaySettingsW LoadMenuW CharToOemBuffA

gdi32

GetCharWidthA GetCharacterPlacementA GetCharABCWidthsFloatA GetBoundsRect

shell32

ShellAboutW

Sharing