4fba79b2f5bb7a1670e6d0bfa4b663a7[.]exe

General

Target
4fba79b2f5bb7a1670e6d0bfa4b663a7.exe
Size 280KB
Sample231226-rdt8asecd8
SHA256 15cdd7b6d90535beeda078d371f868380127c99bfe8e0122201a0ea7b8a2959f
MD5 4fba79b2f5bb7a1670e6d0bfa4b663a7
SHA1 fe1417406b8a943d6f5ee25aaa22b5a39060c51e
SHA512 437a668666d38e384db1273b79b307ffb5504798c38e2d383bb6d24e601dcbe091860f64b46e66d8b469302ee0d3eaaa578bad869842f6e20423755a3df1624d
SSDEEP 6144:5K+o9P1T8dLGuugLHxomQac3eAO8NPkjYvl:5Y9P6dCgLHxQT3/Tk8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fba79b2f5bb7a1670e6d0bfa4b663a7.exe

File Explorer

4fba79b2f5bb7a1670e6d0bfa4b663a7.exe

.exe 280KB

4fba79b2f5bb7a1670e6d0bfa4b663a7.exe

IMPHASH dba82d2caaaaa0ca188ebb442e647d5d
SHA256 15cdd7b6d90535beeda078d371f868380127c99bfe8e0122201a0ea7b8a2959f
MD5 4fba79b2f5bb7a1670e6d0bfa4b663a7
SHA1 fe1417406b8a943d6f5ee25aaa22b5a39060c51e
SHA512 437a668666d38e384db1273b79b307ffb5504798c38e2d383bb6d24e601dcbe091860f64b46e66d8b469302ee0d3eaaa578bad869842f6e20423755a3df1624d
SSDEEP 6144:5K+o9P1T8dLGuugLHxomQac3eAO8NPkjYvl:5Y9P6dCgLHxQT3/Tk8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8265

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetVolumeLabelA SetDefaultCommConfigA GlobalDeleteAtom SetPriorityClass TryEnterCriticalSection EnumDateFormatsExW MoveFileExA SetEndOfFile HeapAlloc QueryPerformanceCounter GetCompressedFileSizeW GlobalAlloc LoadLibraryW ReadConsoleOutputW GetConsoleAliasExesLengthW DnsHostnameToComputerNameW GetTimeFormatW LocalHandle GetModuleFileNameW lstrcatA MultiByteToWideChar CreateJobObjectA GetConsoleOutputCP GetLastError GetLongPathNameA CreateNamedPipeA SetComputerNameA SetTimerQueueTimer DisableThreadLibraryCalls BuildCommDCBW GetTempFileNameA OpenWaitableTimerA GetAtomNameA LoadLibraryA AddAtomW GlobalWire SetConsoleTitleW GetModuleHandleA FreeEnvironmentStringsW VirtualProtect GetCurrentDirectoryA CompareStringA LocalFree SetFileAttributesW LCMapStringW CopyFileExA SetEnvironmentVariableA CompareStringW GetTimeZoneInformation GetModuleHandleW Sleep GetProcAddress ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread WriteFile GetModuleFileNameA FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW GetCommandLineW HeapCreate HeapDestroy VirtualFree HeapFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind ReadFile HeapSize GetLocaleInfoW GetLocaleInfoA SetStdHandle WriteConsoleA WriteConsoleW LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale FlushFileBuffers CreateFileA CloseHandle RaiseException

user32

GetDesktopWindow GetMonitorInfoA

Sharing