5eacfa3bd68b1116875173c7a9a02bb5[.]exe

General

Target
5eacfa3bd68b1116875173c7a9a02bb5.exe
Size 307KB
Sample231202-t8talaea5t
SHA256 f35dbaff6f328daa836dcab2a80cf3efae4dd574788e153a7ecd27f52da9dee1
MD5 5eacfa3bd68b1116875173c7a9a02bb5
SHA1 442959e7a3e4ee866a0185833d27deae8e2d5aad
SHA512 1cb935156a4506b89d5a9b27176f29634e2de9b2e5ab82a2c6050fc4bb85b50838f4d14e78e3165fd1d48006f2e3d9c48c40da79743f4982de179f35e7d3a804
SSDEEP 3072:oT2lsEO4HsAUnK4q7crAa2JEnT1L6Ft5JgRMu63jXdo:59O4Ha1Gckq5mFpg6jX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eacfa3bd68b1116875173c7a9a02bb5.exe

File Explorer

5eacfa3bd68b1116875173c7a9a02bb5.exe

.exe 307KB

5eacfa3bd68b1116875173c7a9a02bb5.exe

IMPHASH 0bd61e688135eda02fcf13008a67a440
SHA256 f35dbaff6f328daa836dcab2a80cf3efae4dd574788e153a7ecd27f52da9dee1
MD5 5eacfa3bd68b1116875173c7a9a02bb5
SHA1 442959e7a3e4ee866a0185833d27deae8e2d5aad
SHA512 1cb935156a4506b89d5a9b27176f29634e2de9b2e5ab82a2c6050fc4bb85b50838f4d14e78e3165fd1d48006f2e3d9c48c40da79743f4982de179f35e7d3a804
SSDEEP 3072:oT2lsEO4HsAUnK4q7crAa2JEnT1L6Ft5JgRMu63jXdo:59O4Ha1Gckq5mFpg6jX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14084

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadResource GlobalAddAtomA EndUpdateResourceW GetCurrentProcess CreateJobObjectW InterlockedCompareExchange SignalObjectAndWait SetComputerNameW GetComputerNameW GetModuleHandleW GetTickCount GetDateFormatA EnumTimeFormatsW TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW GlobalFindAtomA GetConsoleAliasExesLengthW FormatMessageW GetVersionExW SetConsoleCursorPosition CreateFileW GetVolumePathNameA LCMapStringA GetConsoleAliasesW GetLastError SetLastError BackupRead ReadConsoleOutputCharacterA TlsGetValue VirtualAlloc BeginUpdateResourceW EnumDateFormatsExA HeapUnlock SetComputerNameA LoadLibraryA OpenMutexA InterlockedExchangeAdd CreateFileMappingA DeleteTimerQueue CreateFileMappingW FindFirstVolumeMountPointW SetThreadIdealProcessor FoldStringW FindFirstVolumeMountPointA GetModuleHandleA FindFirstChangeNotificationA VirtualProtect CompareStringA GetCurrentThreadId OpenSemaphoreW TerminateJobObject GetWindowsDirectoryW lstrcpyA GetNativeSystemInfo GetProcAddress GetFullPathNameA Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

DdeQueryStringA SetMessageExtraInfo CharUpperW

gdi32

CreateCompatibleBitmap SetDeviceGammaRamp

Sharing