496bbe032a73902d776751dacc128876[.]exe

General

Target
496bbe032a73902d776751dacc128876.exe
Size 10.9MB
Sample240107-ycff3sdfc7
SHA256 2beb801d312dc631c95a1b7dcd4b698d5be0c618097941c42ff70536e3fae87c
MD5 496bbe032a73902d776751dacc128876
SHA1 799b41192c821824f17d54213aa835e0539e450c
SHA512 510913ce06081f65907a1bd287b8a83f43782d2eee4614054ec179dd3dccffd405d07b8533343f7e8daaee906e28740d8fa6cf9530b21710817aa091b3f5193f
SSDEEP 12288:u6tlcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOc3:Ft
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
496bbe032a73902d776751dacc128876.exe

File Explorer

496bbe032a73902d776751dacc128876.exe

.exe 10.9MB

496bbe032a73902d776751dacc128876.exe

IMPHASH 4f5dc64597ca4f695b16cf6dee89f692
SHA256 2beb801d312dc631c95a1b7dcd4b698d5be0c618097941c42ff70536e3fae87c
MD5 496bbe032a73902d776751dacc128876
SHA1 799b41192c821824f17d54213aa835e0539e450c
SHA512 510913ce06081f65907a1bd287b8a83f43782d2eee4614054ec179dd3dccffd405d07b8533343f7e8daaee906e28740d8fa6cf9530b21710817aa091b3f5193f
SSDEEP 12288:u6tlcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOcOc3:Ft
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9919

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetConsoleAliasesLengthW GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess SetMailslotInfo GetSystemWindowsDirectoryW SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize GetConsoleAliasesLengthA GetCommandLineA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW GetFileAttributesW LocalReAlloc WriteConsoleW HeapQueryInformation CreateTimerQueue GetModuleFileNameW GetTimeZoneInformation ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW EnumDateFormatsExA EnterCriticalSection ResetEvent GetLocalTime LoadLibraryA OpenMutexA IsWow64Process GlobalGetAtomNameW GetCurrentConsoleFont GetOEMCP GetModuleHandleA GetConsoleTitleW BuildCommDCBA VirtualProtect GetFileAttributesExW FindFirstVolumeA ReleaseMutex GetVersion AddConsoleAliasA EnumCalendarInfoExA CreateThread ReadFile GetSystemDefaultLangID CreateFileA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoA RaiseException RtlUnwind GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetCaretPos RealGetWindowClassA

Sharing