0382BE94BE1472AA84A80E89C5F2F9C2[.]exe

General

Target
0382BE94BE1472AA84A80E89C5F2F9C2.exe
Size 317KB
Sample231225-v3n95aecbq
SHA256 95d41d4621e1d5d46fe7542f353d19df9d2a29ab7790bed37d89fbd814afa50b
MD5 0382be94be1472aa84a80e89c5f2f9c2
SHA1 8dad93e896c69852f3f928b8531060d386aaed32
SHA512 7e1b71cf4a2e5ec83774d362d83602e1796b58973a62ceac2b8d3f7e91fd0ea4ad8000524ee269f5bda2065002d20572284ad28bccfdfd88ef2aee697613267e
SSDEEP 6144:tr7ATAesR6L002rD6vLC1IKBLf8ycIO2fCmyautV:trMTABR6oD6vmD8hwflyaMV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0382BE94BE1472AA84A80E89C5F2F9C2.exe

File Explorer

0382BE94BE1472AA84A80E89C5F2F9C2.exe

.exe 317KB

0382BE94BE1472AA84A80E89C5F2F9C2.exe

IMPHASH e7adc729423ecbc891063a433bbe9047
SHA256 95d41d4621e1d5d46fe7542f353d19df9d2a29ab7790bed37d89fbd814afa50b
MD5 0382be94be1472aa84a80e89c5f2f9c2
SHA1 8dad93e896c69852f3f928b8531060d386aaed32
SHA512 7e1b71cf4a2e5ec83774d362d83602e1796b58973a62ceac2b8d3f7e91fd0ea4ad8000524ee269f5bda2065002d20572284ad28bccfdfd88ef2aee697613267e
SSDEEP 6144:tr7ATAesR6L002rD6vLC1IKBLf8ycIO2fCmyautV:trMTABR6oD6vmD8hwflyaMV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW MoveFileExW SetDefaultCommConfigW CreateJobObjectW GetProfileStringW CancelWaitableTimer GetCompressedFileSizeW CancelDeviceWakeupRequest GlobalAlloc GetConsoleAliasExesLengthW GetFileAttributesW IsDBCSLeadByte ExitThread SetConsoleTitleA DeactivateActCtx GetLastError GetCurrentDirectoryW GetLongPathNameW LocalLock SetFileAttributesA DisableThreadLibraryCalls SetFilePointer LoadLibraryA OpenWaitableTimerW DnsHostnameToComputerNameA WritePrivateProfileStringA AddAtomW GetModuleFileNameA SetConsoleCursorInfo GetModuleHandleA QueryMemoryResourceNotification lstrcatW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect SetFileShortNameA LocalSize LocalFree CopyFileExA SetEnvironmentVariableA CompareStringW CompareStringA SetPriorityClass SetVolumeLabelA GetTempFileNameW GetEnvironmentVariableW GetAtomNameA GetFullPathNameW GetModuleHandleW Sleep GetProcAddress ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection RtlUnwind HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread WriteFile GetStdHandle DeleteCriticalSection FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc MultiByteToWideChar CloseHandle CreateFileA HeapSize GetLocaleInfoW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale FlushFileBuffers ReadFile SetEndOfFile GetProcessHeap GetTimeZoneInformation RaiseException

user32

GetDesktopWindow GetMonitorInfoA

advapi32

IsValidSid ReadEventLogW GetPrivateObjectSecurity GetServiceKeyNameW PrivilegedServiceAuditAlarmW

Sharing