b92f9a4d53ddaa32a6a42d348744cabd[.]exe

General

Target
b92f9a4d53ddaa32a6a42d348744cabd.exe
Size 289KB
Sample231127-ss3zeshd83
SHA256 0e1c1f54576e5ea6f024852228ef877537849db15a46633d77e36d8439e9609a
MD5 b92f9a4d53ddaa32a6a42d348744cabd
SHA1 d70ee7a27b5c376552c1f62d70efefc68d6d5a50
SHA512 747ffb90b0744964ed3ebc459c9b965937e68ee52c554987e7af20b7769310594c92948f4e3db849ace24fff015b8663063e9ffcf7b604b11d036a3c67685d3e
SSDEEP 3072:B52jCnuzHwEtL4O/S1NUATrBcN11F0p0alESA38ItQ5mESUem9Qj+/:3wCnu7wEtLp/MUATgv8IC/H
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b92f9a4d53ddaa32a6a42d348744cabd.exe

File Explorer

b92f9a4d53ddaa32a6a42d348744cabd.exe

.exe 289KB

b92f9a4d53ddaa32a6a42d348744cabd.exe

IMPHASH 0a0289a4f27045b7c64ea101e69f4d9e
SHA256 0e1c1f54576e5ea6f024852228ef877537849db15a46633d77e36d8439e9609a
MD5 b92f9a4d53ddaa32a6a42d348744cabd
SHA1 d70ee7a27b5c376552c1f62d70efefc68d6d5a50
SHA512 747ffb90b0744964ed3ebc459c9b965937e68ee52c554987e7af20b7769310594c92948f4e3db849ace24fff015b8663063e9ffcf7b604b11d036a3c67685d3e
SSDEEP 3072:B52jCnuzHwEtL4O/S1NUATrBcN11F0p0alESA38ItQ5mESUem9Qj+/:3wCnu7wEtLp/MUATgv8IC/H
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocalTime EndUpdateResourceW SetConsoleTextAttribute GetEnvironmentStringsW SignalObjectAndWait SetComputerNameW AddConsoleAliasW GetModuleHandleW GetWindowsDirectoryA GetDateFormatA GetVolumePathNameW GlobalAlloc LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW FormatMessageW InterlockedPopEntrySList CreateFileW CreateJobObjectA GetConsoleAliasesW GetLastError SetLastError GetProcAddress VirtualAlloc TlsGetValue GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA SetCalendarInfoW CreateFileMappingW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FoldStringW GlobalFindAtomW ConvertDefaultLocale GetModuleHandleA ReadConsoleInputW GetCurrentProcessId GlobalAddAtomW ReadConsoleOutputCharacterW CreateFileA EnumDateFormatsExW GetComputerNameA CreateMemoryResourceNotification DebugActiveProcess Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle FlushFileBuffers GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW

user32

DdeQueryStringW CharUpperW GetMessageExtraInfo

gdi32

CreateCompatibleBitmap GetDeviceGammaRamp

advapi32

SetKernelObjectSecurity

Sharing