120fb9ab24b1906d926f77bab1d0b535[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
120fb9ab24b1906d926f77bab1d0b535.exe
Size 328KB
Sample231128-lbbehsgh22
SHA256 8a59a0e9b326966e4fb7353078bf82b765df754e575a3bfe3bb44220ffb41116
MD5 120fb9ab24b1906d926f77bab1d0b535
SHA1 df0685de31373017c84f41bf4e0bd10dea2be2f7
SHA512 6a0c3567c7c52b55e026353f69581349088478c0bca7c29738e19b7a9866ec7f9362f5b57bd7854e7056768c51330fcea6b1036bf1a1b4fd23149af84961bc6e
SSDEEP 6144:b8mIrH6CaMcn6EAYv2SIjxm39LUG8uyx:AaCaMcnn2jI3C
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
120fb9ab24b1906d926f77bab1d0b535.exe

File Explorer

120fb9ab24b1906d926f77bab1d0b535.exe

.exe 328KB

120fb9ab24b1906d926f77bab1d0b535.exe

IMPHASH 534bfdca31fe91e5b425bdb4dcef0553
SHA256 8a59a0e9b326966e4fb7353078bf82b765df754e575a3bfe3bb44220ffb41116
MD5 120fb9ab24b1906d926f77bab1d0b535
SHA1 df0685de31373017c84f41bf4e0bd10dea2be2f7
SHA512 6a0c3567c7c52b55e026353f69581349088478c0bca7c29738e19b7a9866ec7f9362f5b57bd7854e7056768c51330fcea6b1036bf1a1b4fd23149af84961bc6e
SSDEEP 6144:b8mIrH6CaMcn6EAYv2SIjxm39LUG8uyx:AaCaMcnn2jI3C
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17244

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadResource GlobalAddAtomA GetCurrentProcess CreateJobObjectW SignalObjectAndWait GetComputerNameW GetModuleHandleW GetTickCount GetWindowsDirectoryA TzSpecificLocalTimeToSystemTime GetVolumePathNameW GlobalAlloc LoadLibraryW SetConsoleCursorPosition CompareStringW LCMapStringA GetConsoleAliasesW OpenMutexW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc GetConsoleAliasExesLengthA RemoveDirectoryA SetComputerNameA LoadLibraryA InterlockedExchangeAdd CreateFileMappingW AddVectoredExceptionHandler FindFirstVolumeMountPointW SetThreadIdealProcessor FoldStringW GlobalFindAtomW EnumDateFormatsA GetModuleHandleA HeapSetInformation GetStringTypeW GetCurrentThreadId SetFileShortNameA EndUpdateResourceA TlsGetValue CreateFileA GetNativeSystemInfo EnumDateFormatsExA GetDateFormatW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA

user32

GetMessageExtraInfo CharUpperW DdeQueryStringA

gdi32

CreateCompatibleBitmap GetDeviceGammaRamp

advapi32

SetKernelObjectSecurity

shell32

ShellAboutW

ole32

StringFromCLSID