148d44350c2edaef20758f0c1aa74bd4[.]exe

General

Target
148d44350c2edaef20758f0c1aa74bd4.exe
Size 556KB
Sample240101-ygc7hsbbc4
SHA256 6c466098bf56b4a674922a48479930a2282f0a87c1156e97d6f3491a0872840e
MD5 148d44350c2edaef20758f0c1aa74bd4
SHA1 d2dd6c3ca6830c6cd168ef68ba496d6c87cf022f
SHA512 de1bd35211f9c0287977843f45d88a67ceea92bfa95cb31839c06802b980f47d3709f99afa4feac4a081cd4f1a6f3afa464e3075c726528c50768cf0f79f67c2
SSDEEP 12288:WLKFKqvz3CehLSO+YjN43jRPoZNmjvN+Bc70phMtwTk1:Mqvz7+YyVPo+vP48V1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
148d44350c2edaef20758f0c1aa74bd4.exe

File Explorer

148d44350c2edaef20758f0c1aa74bd4.exe

.exe 556KB

148d44350c2edaef20758f0c1aa74bd4.exe

IMPHASH ab6a8b01372d51e7fed6c22dcfc42852
SHA256 6c466098bf56b4a674922a48479930a2282f0a87c1156e97d6f3491a0872840e
MD5 148d44350c2edaef20758f0c1aa74bd4
SHA1 d2dd6c3ca6830c6cd168ef68ba496d6c87cf022f
SHA512 de1bd35211f9c0287977843f45d88a67ceea92bfa95cb31839c06802b980f47d3709f99afa4feac4a081cd4f1a6f3afa464e3075c726528c50768cf0f79f67c2
SSDEEP 12288:WLKFKqvz3CehLSO+YjN43jRPoZNmjvN+Bc70phMtwTk1:Mqvz7+YyVPo+vP48V1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW FileTimeToDosDateTime SetThreadContext GetNativeSystemInfo SetFilePointer lstrlenA CopyFileExW TlsGetValue InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement GetSystemWindowsDirectoryW GlobalLock WaitForSingleObject SetEvent OpenSemaphoreA FreeEnvironmentStringsA GetTickCount CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetDriveTypeA GetPriorityClass LoadLibraryW GetConsoleMode TerminateThread GetVersionExW SetConsoleMode SetConsoleCursorPosition ReadFile GetOverlappedResult CompareStringW GetStartupInfoW GetNamedPipeHandleStateW GetPrivateProfileIntW CreateDirectoryA GetFileSizeEx GetLastError IsDBCSLeadByteEx ReadConsoleOutputCharacterA GetProcAddress CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA LocalAlloc IsSystemResumeAutomatic SetCurrentDirectoryW WriteProfileSectionW HeapWalk SetNamedPipeHandleState Process32NextW SetConsoleTitleW FindFirstChangeNotificationA FreeEnvironmentStringsW EnumResourceNamesA FatalAppExitA GetCurrentThreadId GetCPInfoExA FindAtomW GetSystemTime LCMapStringW DeleteFileA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle TlsAlloc TlsSetValue TlsFree SetLastError TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte GetConsoleCP DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpReadData

Sharing