a95ca03aa289b46e2f3035692fc5a8b1[.]exe

General

Target
a95ca03aa289b46e2f3035692fc5a8b1.exe
Size 526KB
Sample240107-x9q4eacfcl
SHA256 0a9f30304c65ff72ef0eb9cdbee336ea147d14e3294eb0da0a255839acc4b8a7
MD5 a95ca03aa289b46e2f3035692fc5a8b1
SHA1 67a1b648d1e41d02a829b174f4790f68c1b4b1a9
SHA512 58220f83585ab1d26ea144cc4745dee3618e126fdc0bbfb176165eeb8a3d1b1917492a656d145a71bf413cd6e47492e53c7caae01637d054fcfcea4913eb63cb
SSDEEP 12288:lrQGbsrcBlOfB+HrIpJ+mlmt3VzDXXjsqTYBPAi:lrQGArwlwBaIp7U5DXXoBPA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a95ca03aa289b46e2f3035692fc5a8b1.exe

File Explorer

a95ca03aa289b46e2f3035692fc5a8b1.exe

.exe 526KB

a95ca03aa289b46e2f3035692fc5a8b1.exe

IMPHASH a06df199bc5c29ff1f7c13754059d5f1
SHA256 0a9f30304c65ff72ef0eb9cdbee336ea147d14e3294eb0da0a255839acc4b8a7
MD5 a95ca03aa289b46e2f3035692fc5a8b1
SHA1 67a1b648d1e41d02a829b174f4790f68c1b4b1a9
SHA512 58220f83585ab1d26ea144cc4745dee3618e126fdc0bbfb176165eeb8a3d1b1917492a656d145a71bf413cd6e47492e53c7caae01637d054fcfcea4913eb63cb
SSDEEP 12288:lrQGbsrcBlOfB+HrIpJ+mlmt3VzDXXjsqTYBPAi:lrQGArwlwBaIp7U5DXXoBPA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

352231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasW InterlockedPopEntrySList GetConsoleDisplayMode CreateConsoleScreenBuffer GetConsoleCP VerifyVersionInfoA WriteConsoleA SetLastError CreateFileW WritePrivateProfileSectionA GetPrivateProfileSectionW EnumDateFormatsExA GetCurrentProcessId LoadLibraryA IsDebuggerPresent SetConsoleCP FindFirstVolumeW WriteFile BuildCommDCBW VerLanguageNameA AreFileApisANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfo GetLastError UpdateResourceA SetConsoleTitleW SetFilePointer LoadLibraryExA CopyFileW ReadConsoleA ActivateActCtx AddRefActCtx HeapLock CreateActCtxW ReadConsoleOutputA GetProcessHeaps GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA HeapAlloc UnmapViewOfFile GetAtomNameA HeapSize GetGeoInfoW GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW SetProcessAffinityMask WaitForSingleObject SetSystemPowerState VerifyVersionInfoW WriteConsoleOutputCharacterW SetTimeZoneInformation GetMailslotInfo GetCPInfoExA SetEnvironmentVariableA GetFileAttributesExA GetComputerNameW CommConfigDialogW GetConsoleAliasA GetConsoleWindow GetSystemTimeAsFileTime GetDiskFreeSpaceA CreateFileA GetConsoleAliasesLengthA DnsHostnameToComputerNameA EnterCriticalSection InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapFree TerminateProcess GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle LCMapStringA LCMapStringW GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW

user32

RealChildWindowFromPoint GetAltTabInfoA

advapi32

AdjustTokenGroups BackupEventLogA

Sharing