f990201eadb1c0eab5b192e224b8ba1b[.]exe

General

Target
f990201eadb1c0eab5b192e224b8ba1b.exe
Size 290KB
Sample231126-k2q28agb95
SHA256 caea4462ef597dcaaff2856f52b7ec416965fd92d421a105ca97ef82376cd195
MD5 f990201eadb1c0eab5b192e224b8ba1b
SHA1 c134f7c7d3c00e072249d8a6d2e550980022f9e8
SHA512 ad89fc01e1466a9551758381e3b029baec7b53a8cede91f4e5a838e65d3b722eda7315dd88978eb1eeef82bc094d0603408e193c5d2d238e6e6a315f66d4dcf3
SSDEEP 3072:FekmIh+soDFqegD3gI2bqy5n8jaLaeGQl+tax0Q6VkV8Q5mUZUWRQj+/:wk7h+soBAgIQqun8jaLa7Ql+QCjlfg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f990201eadb1c0eab5b192e224b8ba1b.exe

File Explorer

f990201eadb1c0eab5b192e224b8ba1b.exe

.exe 290KB

f990201eadb1c0eab5b192e224b8ba1b.exe

IMPHASH 0a0289a4f27045b7c64ea101e69f4d9e
SHA256 caea4462ef597dcaaff2856f52b7ec416965fd92d421a105ca97ef82376cd195
MD5 f990201eadb1c0eab5b192e224b8ba1b
SHA1 c134f7c7d3c00e072249d8a6d2e550980022f9e8
SHA512 ad89fc01e1466a9551758381e3b029baec7b53a8cede91f4e5a838e65d3b722eda7315dd88978eb1eeef82bc094d0603408e193c5d2d238e6e6a315f66d4dcf3
SSDEEP 3072:FekmIh+soDFqegD3gI2bqy5n8jaLaeGQl+tax0Q6VkV8Q5mUZUWRQj+/:wk7h+soBAgIQqun8jaLa7Ql+QCjlfg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocalTime EndUpdateResourceW SetConsoleTextAttribute GetEnvironmentStringsW SignalObjectAndWait SetComputerNameW AddConsoleAliasW GetModuleHandleW GetWindowsDirectoryA GetDateFormatA GetVolumePathNameW GlobalAlloc LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW FormatMessageW InterlockedPopEntrySList CreateFileW CreateJobObjectA GetConsoleAliasesW GetLastError SetLastError GetProcAddress VirtualAlloc TlsGetValue GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA SetCalendarInfoW CreateFileMappingW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FoldStringW GlobalFindAtomW ConvertDefaultLocale GetModuleHandleA ReadConsoleInputW GetCurrentProcessId GlobalAddAtomW ReadConsoleOutputCharacterW CreateFileA EnumDateFormatsExW GetComputerNameA CreateMemoryResourceNotification DebugActiveProcess Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle FlushFileBuffers GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW

user32

DdeQueryStringW CharUpperW GetMessageExtraInfo

gdi32

CreateCompatibleBitmap GetDeviceGammaRamp

advapi32

SetKernelObjectSecurity

Sharing