ef167ad06fabec10a3eba5808a3d784c[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ef167ad06fabec10a3eba5808a3d784c.exe
Size 273KB
Sample231202-vdyr9seb74
SHA256 bc942b482e47ac775ca6574d7faaed3f75fb34d1ccc6e4cbb9e538bacd86dc52
MD5 ef167ad06fabec10a3eba5808a3d784c
SHA1 3406848f5b65554011e8cff0501458fa72a93a67
SHA512 c20f9a712c2149b413fff1c35bfdc6096990be81934d27c888ffc68e802ed55484b0fcbd83bf6d9b873802ece2223c05027f7974dc8698f3606722db54dbf90a
SSDEEP 1536:Evq17H/qxHlbd5KtZ5eK5fPNcW6A4UmlvOrnD8qZT0uhW6wUgqwLg5LzRp5cSr8C:Evq1rKKb5GUmlvUBh4Mb5L99UX558
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef167ad06fabec10a3eba5808a3d784c.exe

File Explorer

ef167ad06fabec10a3eba5808a3d784c.exe

.exe 273KB

ef167ad06fabec10a3eba5808a3d784c.exe

IMPHASH f109daeffa34d8a3742c87df9b7731c0
SHA256 bc942b482e47ac775ca6574d7faaed3f75fb34d1ccc6e4cbb9e538bacd86dc52
MD5 ef167ad06fabec10a3eba5808a3d784c
SHA1 3406848f5b65554011e8cff0501458fa72a93a67
SHA512 c20f9a712c2149b413fff1c35bfdc6096990be81934d27c888ffc68e802ed55484b0fcbd83bf6d9b873802ece2223c05027f7974dc8698f3606722db54dbf90a
SSDEEP 1536:Evq17H/qxHlbd5KtZ5eK5fPNcW6A4UmlvOrnD8qZT0uhW6wUgqwLg5LzRp5cSr8C:Evq1rKKb5GUmlvUBh4Mb5L99UX558
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14129

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadResource EndUpdateResourceW GetCurrentProcess CreateJobObjectW InterlockedCompareExchange SignalObjectAndWait SetComputerNameW GetComputerNameW GetModuleHandleW GetTickCount EnumTimeFormatsA GetDateFormatA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW GlobalFindAtomA FormatMessageW GetVersionExW SetConsoleCursorPosition GetVolumePathNameA LCMapStringA GetConsoleAliasesW OpenMutexW GetLastError SetLastError BackupRead GetConsoleAliasExesLengthA CreateFileA VirtualAlloc EnumDateFormatsExA HeapUnlock SetComputerNameA LoadLibraryA InterlockedExchangeAdd CreateFileMappingA DeleteTimerQueue CreateFileMappingW FindFirstVolumeMountPointW SetThreadIdealProcessor FoldStringW FindFirstVolumeMountPointA VirtualProtect CompareStringA GetCurrentThreadId OpenSemaphoreW TerminateJobObject GetWindowsDirectoryW GlobalAddAtomW lstrcpyA TlsGetValue ReadConsoleOutputCharacterA GetNativeSystemInfo GetFullPathNameA GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA RaiseException TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA HeapAlloc HeapReAlloc MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperW DdeQueryStringA SetMessageExtraInfo

gdi32

CreateCompatibleBitmap SetDeviceGammaRamp

advapi32

SetKernelObjectSecurity

ole32

StringFromIID