24cc6b095d5f0b4d3f231e00145b4860[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
24cc6b095d5f0b4d3f231e00145b4860.exe
Size 210KB
Sample231111-hnmfrsdd94
SHA256 98368ebea0db4a1ef1ef8ae8b9cdc862c8dc5bb00bfb570f83a50794ce6ad816
MD5 24cc6b095d5f0b4d3f231e00145b4860
SHA1 dbd2d7eb80669f1bc116b1308fdd014d1cefc1e9
SHA512 51a6ea27dc6f8eba10b5b0efaf18cc65780738da77ef29ca66e6dd6fdf3b91356fa7642163fe4ba36ca121dbd93714923ba8b12b75b0b6dacecab0990924e64a
SSDEEP 3072:ZGYe0UBjwo7k8omgYyMgWPggq6W9Om5G5TNPMb6BLwhrBjFKT:ol0uXAdmgFyoR6W9OmA3C6Kx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24cc6b095d5f0b4d3f231e00145b4860.exe

File Explorer

24cc6b095d5f0b4d3f231e00145b4860.exe

.exe 210KB

24cc6b095d5f0b4d3f231e00145b4860.exe

IMPHASH 13937693d95394f2ce32af6042a00c30
SHA256 98368ebea0db4a1ef1ef8ae8b9cdc862c8dc5bb00bfb570f83a50794ce6ad816
MD5 24cc6b095d5f0b4d3f231e00145b4860
SHA1 dbd2d7eb80669f1bc116b1308fdd014d1cefc1e9
SHA512 51a6ea27dc6f8eba10b5b0efaf18cc65780738da77ef29ca66e6dd6fdf3b91356fa7642163fe4ba36ca121dbd93714923ba8b12b75b0b6dacecab0990924e64a
SSDEEP 3072:ZGYe0UBjwo7k8omgYyMgWPggq6W9Om5G5TNPMb6BLwhrBjFKT:ol0uXAdmgFyoR6W9OmA3C6Kx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33517

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleInputW lstrlenA EnumDateFormatsExW GetLocaleInfoA GetDriveTypeW _llseek WriteConsoleOutputCharacterA BuildCommDCBAndTimeoutsA WriteConsoleOutputW HeapAlloc DeleteVolumeMountPointA InterlockedIncrement VerSetConditionMask OpenJobObjectA GetCommState GetConsoleAliasA InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW QueryDosDeviceA HeapFree GetEnvironmentStringsW WriteConsoleInputA AddConsoleAliasW CreateHardLinkA SleepEx GetFileAttributesExA _lclose MoveFileWithProgressA GetModuleHandleW CreateNamedPipeW LocalFlags FindNextVolumeMountPointA GetConsoleAliasesA GetConsoleAliasesLengthA ConvertFiberToThread ExpandEnvironmentStringsA ReadConsoleW GetConsoleAliasExesW WaitNamedPipeW GetUserDefaultLangID SetCommState GetCommandLineA CreateDirectoryExW GetDriveTypeA GetVolumePathNameW GetCurrencyFormatW ActivateActCtx GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetConsoleMode SetCommConfig _hread GetCalendarInfoW GetSystemWindowsDirectoryA InterlockedPopEntrySList GetFileAttributesA GlobalFlags HeapCreate SetTimeZoneInformation SetSystemPowerState WritePrivateProfileSectionW TerminateProcess ReplaceFileW GetCompressedFileSizeA CreateActCtxA SetThreadContext CompareStringW lstrlenW GlobalUnlock DisconnectNamedPipe GetTempPathW GetNamedPipeHandleStateW EnumSystemLocalesA GetPrivateProfileIntW GetConsoleOutputCP VerifyVersionInfoW GlobalUnfix FindFirstFileA GetCurrentDirectoryW GetProcAddress RemoveDirectoryA SetComputerNameA GetProcessVersion GetPrivateProfileStringA OpenWaitableTimerA Process32FirstW LocalAlloc IsWow64Process BuildCommDCBAndTimeoutsW AddAtomW CreateEventW GlobalGetAtomNameW SetThreadIdealProcessor FoldStringW FoldStringA FindNextFileA _lread GetModuleHandleA SetLocaleInfoW CancelIo GetProcessAffinityMask FindNextFileW GetStringTypeW WriteProfileStringW VirtualProtect GetConsoleCursorInfo QueryPerformanceFrequency GetShortPathNameW SetCalendarInfoA SetProcessShutdownParameters OpenSemaphoreW FindFirstVolumeA ReadConsoleInputW FindAtomW GetWindowsDirectoryW DeleteFileW MoveFileWithProgressW GetConsoleProcessList GetTempPathA ReadConsoleOutputCharacterW InterlockedPushEntrySList TlsFree EnumSystemLocalesW GetVolumeInformationW lstrcpyA CloseHandle WriteConsoleW SetStdHandle FlushFileBuffers SetFilePointer HeapReAlloc FindFirstFileW CreateFileA DebugActiveProcess GetVolumeNameForVolumeMountPointA ExitProcess IsValidLocale GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP HeapSize GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetLocaleInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsGetValue TlsSetValue SetLastError GetCurrentThreadId FreeEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter CreateFileW

user32

CharToOemBuffA GetDlgCtrlID GetAltTabInfoW DrawCaption CharUpperW

gdi32

GetCharWidthFloatA

advapi32

ClearEventLogA RevertToSelf InitiateSystemShutdownA AbortSystemShutdownW

shell32

DragAcceptFiles

ole32

CoGetInstanceFromFile

winhttp

WinHttpGetProxyForUrl WinHttpWriteData WinHttpReadData WinHttpOpen