048dbb13d456e5edb0852bb0be9a2fd7[.]exe

General

Target
048dbb13d456e5edb0852bb0be9a2fd7.exe
Size 14.0MB
Sample240101-l4nkjsbcb4
SHA256 89fb1911ddfe210dbc22eaed8208dd730ff5f81b79180e613017d9ea1154f218
MD5 048dbb13d456e5edb0852bb0be9a2fd7
SHA1 e03626c61c1502d35c4bb47a01de533c10382b4e
SHA512 2de5516bc8aa144ed18a50797a35d9085a4bfda647a33ec20a5cce9d3dcbde12d93e5a5c9e22a1ab01dbcb8e2992e4bde28debb8b35483e6e646fa131f4e5f5d
SSDEEP 24576:mjCj10HSqGgeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeP:m/D
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048dbb13d456e5edb0852bb0be9a2fd7.exe

File Explorer

048dbb13d456e5edb0852bb0be9a2fd7.exe

.exe 14.0MB

048dbb13d456e5edb0852bb0be9a2fd7.exe

IMPHASH 800102d28cf35c665bee356e0e434ad6
SHA256 89fb1911ddfe210dbc22eaed8208dd730ff5f81b79180e613017d9ea1154f218
MD5 048dbb13d456e5edb0852bb0be9a2fd7
SHA1 e03626c61c1502d35c4bb47a01de533c10382b4e
SHA512 2de5516bc8aa144ed18a50797a35d9085a4bfda647a33ec20a5cce9d3dcbde12d93e5a5c9e22a1ab01dbcb8e2992e4bde28debb8b35483e6e646fa131f4e5f5d
SSDEEP 24576:mjCj10HSqGgeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeP:m/D
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetComputerNameA GetFileSize SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx GlobalLock GetProfileSectionA SetComputerNameW GetFileAttributesExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig LocalFlags GetConsoleAliasesLengthA GetWindowsDirectoryA SetCommState TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemWindowsDirectoryA GetSystemTimeAdjustment InitAtomTable GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW SetConsoleTitleA VirtualUnlock LCMapStringA SetCurrentDirectoryA GetStartupInfoA GetStdHandle GetCPInfoExW GetCurrentDirectoryW VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA GetLocalTime LoadLibraryA CreateSemaphoreW SetConsoleCtrlHandler WriteProfileSectionW Process32NextW CreateIoCompletionPort EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect _lopen FindAtomW GetVersion DeleteFileW UnregisterWaitEx ReadConsoleOutputCharacterW AreFileApisANSI CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

GetMessageTime GetMenuInfo

Sharing