7acd929f1a629334a905f6c37e81f60a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
7acd929f1a629334a905f6c37e81f60a.exe
Size 240KB
Sample240107-y5vfpsefc7
SHA256 184105b25006155cdabe559105e29b900ce4e014346b34585e916d0229993b7b
MD5 7acd929f1a629334a905f6c37e81f60a
SHA1 5980d33ce5c046e3b9df5d6e2a59b2f76bab3a3c
SHA512 e67b33917ac8529dc92a36848b0f375fc5e37b39d4fa88305872b51db5e378472ada4fdde4691c55d6645045a0b0aea6a144fa9922a1291043cf74bdcab578af
SSDEEP 3072:4I0/tfqGL3txR6Nthj0I2aR1DXmaSU+ymHnHpgczwfSZJqsXSnhFkEv:Ut5xoNthj0I2aR1zmYiHvwfSZ4sXAF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7acd929f1a629334a905f6c37e81f60a.exe

File Explorer

7acd929f1a629334a905f6c37e81f60a.exe

.exe 240KB

7acd929f1a629334a905f6c37e81f60a.exe

IMPHASH 08bca23b44274b89c6980b3fd0bc0ab9
SHA256 184105b25006155cdabe559105e29b900ce4e014346b34585e916d0229993b7b
MD5 7acd929f1a629334a905f6c37e81f60a
SHA1 5980d33ce5c046e3b9df5d6e2a59b2f76bab3a3c
SHA512 e67b33917ac8529dc92a36848b0f375fc5e37b39d4fa88305872b51db5e378472ada4fdde4691c55d6645045a0b0aea6a144fa9922a1291043cf74bdcab578af
SSDEEP 3072:4I0/tfqGL3txR6Nthj0I2aR1DXmaSU+ymHnHpgczwfSZJqsXSnhFkEv:Ut5xoNthj0I2aR1zmYiHvwfSZ4sXAF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

114265

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA GetModuleFileNameA FindNextFileA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection FindFirstFileA ExpandEnvironmentStringsA RemoveDirectoryA GetFileAttributesA DeleteFileA CreateDirectoryA GetFileSize SetFileAttributesA GetShortPathNameA ReadFile GlobalMemoryStatus CreateProcessA GetVersionExA SetEvent OpenEventA WaitForSingleObject MoveFileExA GetDiskFreeSpaceA GetProcAddress LoadLibraryA FreeLibrary LocalFree GetCurrentThread CreateMutexA OpenMutexA InterlockedIncrement InterlockedDecrement GlobalFree GlobalAlloc GetModuleHandleA OutputDebugStringA GetLocalTime CreateEventA GetTempFileNameA FindClose GlobalUnlock GlobalLock ResetEvent CreateThread lstrcmpiA SetEnvironmentVariableA CompareStringW CompareStringA ReleaseSemaphore IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA IsBadWritePtr VirtualAlloc SetEndOfFile SetStdHandle FlushFileBuffers GetOEMCP GetACP GetCPInfo VirtualFree HeapCreate HeapDestroy GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter LCMapStringW LCMapStringA MultiByteToWideChar GetPrivateProfileStringA CopyFileA WriteFile CreateFileA SetFilePointer GetTickCount CloseHandle WritePrivateProfileStringA GetExitCodeProcess GetLastError SetLastError Sleep lstrcatA GetWindowsDirectoryA GetVolumeInformationA lstrlenA lstrcpynA lstrcpyA SearchPathA FormatMessageA GetSystemDirectoryA HeapAlloc GetCurrentThreadId UnmapViewOfFile MapViewOfFile WideCharToMultiByte HeapSize HeapReAlloc GetCurrentProcess TerminateProcess TlsGetValue TlsAlloc TlsSetValue OpenSemaphoreA CreateFileMappingA HeapFree GetFileType ExitProcess GetVersion GetCommandLineA GetStartupInfoA GetSystemTime GetTimeZoneInformation RtlUnwind

advapi32

RegQueryValueExA RegOpenKeyExA RevertToSelf ImpersonateSelf AreAllAccessesGranted GetAclInformation GetAce AllocateAndInitializeSid GetLengthSid InitializeAcl FreeSid InitializeSecurityDescriptor SetSecurityDescriptorDacl RegEnumKeyExA RegQueryInfoKeyA RegEnumValueA RegEnumKeyA RegDeleteKeyA RegDeleteValueA RegCreateKeyExA RegSetValueExA AccessCheck OpenThreadToken RegCloseKey AddAccessAllowedAce

lz32

LZOpenFileA LZClose LZSeek LZRead

ole32

CoCreateGuid

user32

GetClassInfoExA WaitForInputIdle DestroyWindow wsprintfA DispatchMessageA TranslateMessage GetMessageA UpdateWindow SetWindowPos ShowWindow IsWindow CreateWindowExA SetRect GetSystemMetrics SystemParametersInfoA RegisterClassExA LoadCursorA LoadIconA DefWindowProcA SetPropA GetPropA KillTimer SetTimer PostMessageA EnumWindows GetClassNameA GetDesktopWindow MessageBoxA PostQuitMessage SetForegroundWindow PeekMessageA GetCursorPos GetWindowTextA FindWindowA IsWindowVisible

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

wsock32

recv WSACleanup WSAStartup WSACancelAsyncRequest inet_addr WSAAsyncGetHostByName getsockopt __WSAFDIsSet select connect htons ioctlsocket bind inet_ntoa socket closesocket send WSAGetLastError