42f39d07d6b48a178c3453b6db29ac89[.]exe

General

Target
42f39d07d6b48a178c3453b6db29ac89.exe
Size 363KB
Sample231222-lbw18aeeeq
SHA256 7eda35b2c10d5bbc286d3f446c142758783aea0535b55c9dd42968d35ca202fa
MD5 42f39d07d6b48a178c3453b6db29ac89
SHA1 7b4039b2c8af8c788474783e37f0e8d8c7ab0f5a
SHA512 dd28f526c7ae290c7c058cfef30eed7ad34d235a85601d8ff96e404d6b1504885931fe50e734d79ca4ea4087d4a18fead4cf5984b0e62620b52f8708dc9ee8af
SSDEEP 6144:XD+PMb1LmDrxhkF8TGT4+HdS6L0MUbZ3iTkkP2d3UmuDsNeF:z+PMRExqF8T6dr0RZ3q83UmuIN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f39d07d6b48a178c3453b6db29ac89.exe

File Explorer

42f39d07d6b48a178c3453b6db29ac89.exe

.exe 363KB

42f39d07d6b48a178c3453b6db29ac89.exe

IMPHASH ebf99f4b051756ed02a4200d6e0836af
SHA256 7eda35b2c10d5bbc286d3f446c142758783aea0535b55c9dd42968d35ca202fa
MD5 42f39d07d6b48a178c3453b6db29ac89
SHA1 7b4039b2c8af8c788474783e37f0e8d8c7ab0f5a
SHA512 dd28f526c7ae290c7c058cfef30eed7ad34d235a85601d8ff96e404d6b1504885931fe50e734d79ca4ea4087d4a18fead4cf5984b0e62620b52f8708dc9ee8af
SSDEEP 6144:XD+PMb1LmDrxhkF8TGT4+HdS6L0MUbZ3iTkkP2d3UmuDsNeF:z+PMRExqF8T6dr0RZ3q83UmuIN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MoveFileExW GlobalSize CreateJobObjectW SetHandleInformation GetProfileStringW FreeEnvironmentStringsA SetTapeParameters GetCompressedFileSizeW GetPriorityClass GetVolumePathNameW GetConsoleAliasExesLengthW GetFileAttributesA lstrcatA ExitThread GetDevicePowerState GetLastError IsDBCSLeadByteEx GetLongPathNameW LocalLock EnterCriticalSection SetFileAttributesA LoadResource GetTempFileNameA GetAtomNameA LoadLibraryA OpenWaitableTimerW LocalAlloc WritePrivateProfileStringA SetConsoleDisplayMode AddAtomW DeviceIoControl GetModuleFileNameA SetConsoleTitleW GetModuleHandleA QueryMemoryResourceNotification VirtualProtect GetCurrentDirectoryA SetFileShortNameA LocalFree CopyFileExA SetEnvironmentVariableA CompareStringW WriteConsoleOutputCharacterW SetFilePointer SetDefaultCommConfigA GetEnvironmentVariableW LocalUnlock DisableThreadLibraryCalls GetFullPathNameW GetModuleHandleW Sleep GetProcAddress ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc LeaveCriticalSection RtlUnwind HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread WriteFile GetStdHandle DeleteCriticalSection FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize GetLocaleInfoW GetLocaleInfoA FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale ReadFile SetStdHandle SetEndOfFile GetProcessHeap WriteConsoleA GetConsoleOutputCP WriteConsoleW GetTimeZoneInformation CompareStringA RaiseException

user32

GetProcessDefaultLayout

advapi32

GetServiceKeyNameA ReadEventLogA GetPrivateObjectSecurity EqualSid RegRestoreKeyA PrivilegedServiceAuditAlarmW

Sharing