1e2e1af08d379134811a4cd10474714d[.]exe

General

Target
1e2e1af08d379134811a4cd10474714d.exe
Size 11.6MB
Sample240101-mde16abec6
SHA256 3b096e70a59f87eabdcc239f9eac549cbdabb51ae3b82e299b9d840d3878a415
MD5 1e2e1af08d379134811a4cd10474714d
SHA1 fb6f3185b989a372d1d53ab7b50fbfd19be32046
SHA512 12dd43e0efeba2f974e7ae8bebe55109853670d4af991686a3fb529986eed32aefc8e86b3a5e5d9d2c5332f9d473a452dd8ae2ed5f2214c7a518dc189aeef9d1
SSDEEP 24576:sjY+lg48SlJPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP3:XHSl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e2e1af08d379134811a4cd10474714d.exe

File Explorer

1e2e1af08d379134811a4cd10474714d.exe

.exe 11.6MB

1e2e1af08d379134811a4cd10474714d.exe

IMPHASH ab2fb56fc05bfc607ada1283b4f9a600
SHA256 3b096e70a59f87eabdcc239f9eac549cbdabb51ae3b82e299b9d840d3878a415
MD5 1e2e1af08d379134811a4cd10474714d
SHA1 fb6f3185b989a372d1d53ab7b50fbfd19be32046
SHA512 12dd43e0efeba2f974e7ae8bebe55109853670d4af991686a3fb529986eed32aefc8e86b3a5e5d9d2c5332f9d473a452dd8ae2ed5f2214c7a518dc189aeef9d1
SSDEEP 24576:sjY+lg48SlJPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP3:XHSl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW EnumResourceNamesW SetVolumeLabelA SearchPathW FindFirstFileW OpenFile SetLocalTime GetDriveTypeW SetEndOfFile GetNumberOfConsoleInputEvents InterlockedIncrement GetCommState InterlockedDecrement GetProfileStringW GetProfileSectionA GetComputerNameW CreateDirectoryExA CallNamedPipeW GetModuleHandleW GenerateConsoleCtrlEvent GetConsoleTitleA GetWindowsDirectoryA GetSystemWow64DirectoryA EnumResourceTypesA TlsSetValue FindResourceExA GlobalAlloc AddRefActCtx GetVolumeInformationA Sleep ReadFileScatter GetConsoleWindow GetSystemTimeAdjustment GetVersionExW InterlockedPopEntrySList GlobalFlags VerifyVersionInfoA GetBinaryTypeA TerminateProcess ReadFile CompareStringW lstrlenW SetConsoleTitleA GlobalUnlock LCMapStringA GetConsoleOutputCP CreateDirectoryA InterlockedExchange GetFileSizeEx GetStdHandle IsDBCSLeadByteEx GetProcAddress FreeUserPhysicalPages SetComputerNameA CreateMemoryResourceNotification SearchPathA GetPrivateProfileStringA GetAtomNameA Process32FirstW OpenWaitableTimerW SetCalendarInfoW IsSystemResumeAutomatic SetFileApisToANSI WriteProfileSectionW GetCommMask AddAtomA GetTapeParameters GetSystemInfo GetOEMCP SetConsoleCursorInfo CreateIoCompletionPort WaitCommEvent FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA CompareStringA ScrollConsoleScreenBufferA CopyFileExA DeleteFileA GetModuleHandleA CreateFileA GetLastError MoveFileA GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetCPInfo IsValidCodePage DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount LoadLibraryA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle SetStdHandle WriteConsoleA

user32

GetMenuCheckMarkDimensions GetMenuInfo GetComboBoxInfo GetMenuBarInfo

Sharing