2ceb3343bc2673461aadd7fc703bd421[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2ceb3343bc2673461aadd7fc703bd421.exe
Size 256KB
Sample231215-x5hapsghgp
SHA256 d76730739de688d0598bba500856909a7800c26a2b09ffb2e111c385c6448d94
MD5 2ceb3343bc2673461aadd7fc703bd421
SHA1 9867874baab5d3aa24dfc728204e4b2a15bdacc2
SHA512 ef5ab0960122d22c4c937cbaed17d898355fb8a600a95e4662be453c6a5a0492154bb87b5aa54907e9e41b7a0543eb6e9659f7b07500fb35a0fda94b9446a7a4
SSDEEP 6144:2nxDu7LCBb1K+qUI4El0lL+4lTLYvKGvV2jfn:2o3wbI+qUI4FL+eT+/vV2jv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ceb3343bc2673461aadd7fc703bd421.exe

File Explorer

2ceb3343bc2673461aadd7fc703bd421.exe

.exe 256KB

2ceb3343bc2673461aadd7fc703bd421.exe

IMPHASH a78e7a6400453cb536eea876b9168fc0
SHA256 d76730739de688d0598bba500856909a7800c26a2b09ffb2e111c385c6448d94
MD5 2ceb3343bc2673461aadd7fc703bd421
SHA1 9867874baab5d3aa24dfc728204e4b2a15bdacc2
SHA512 ef5ab0960122d22c4c937cbaed17d898355fb8a600a95e4662be453c6a5a0492154bb87b5aa54907e9e41b7a0543eb6e9659f7b07500fb35a0fda94b9446a7a4
SSDEEP 6144:2nxDu7LCBb1K+qUI4El0lL+4lTLYvKGvV2jfn:2o3wbI+qUI4FL+eT+/vV2jv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

43401

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA PeekNamedPipe ConvertThreadToFiber InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateA GetEnvironmentStringsW WriteConsoleInputA SetVolumeMountPointW GetModuleHandleW LocalFlags ReadConsoleW GetWindowsDirectoryA GlobalAlloc LoadLibraryW GetLocaleInfoW GetVersionExW GetConsoleAliasW WriteConsoleW WritePrivateProfileSectionW ReadFile GetCompressedFileSizeA GetStartupInfoW VirtualUnlock FindFirstFileA GetCPInfoExW GetLastError SetLastError GetProcAddress HeapSize IsValidCodePage OpenWaitableTimerA WriteConsoleA LocalAlloc FindFirstVolumeMountPointW UpdateResourceW FindNextFileW GetCurrentDirectoryA WaitForDebugEvent GetVolumeNameForVolumeMountPointW GlobalAddAtomW GetProfileSectionW CommConfigDialogW CreateFileW FlushFileBuffers SetStdHandle GetConsoleMode GetCommandLineW LocalUnlock GetShortPathNameA DebugActiveProcess GetConsoleCP SetFilePointer WideCharToMultiByte InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree DeleteFileA HeapReAlloc GetCommandLineA HeapSetInformation GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetACP GetOEMCP TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CloseHandle

user32

CharToOemBuffA CharUpperBuffW GetDlgCtrlID

gdi32

GetCharWidthW

advapi32

DuplicateToken

winhttp

WinHttpCloseHandle