61a764045daabe15243e13405d418e3f60b6671ee7a1e325c6021204920f741cexe[.]exe

General

Target
61a764045daabe15243e13405d418e3f60b6671ee7a1e325c6021204920f741cexe.exe
Size 257KB
Sample240107-ych7zadfd2
SHA256 61a764045daabe15243e13405d418e3f60b6671ee7a1e325c6021204920f741c
MD5 db63383553451e2108a49e7bd1701f71
SHA1 51e951481a718b95a975a40c0db950699c91ac78
SHA512 32c9dd4a45b9e63bb9bbc58ee2425fd225153cbbbfd442b4196dd1cc2ed8afe52b6d8626f9bb635ef55ccd1192138245325043978e42a55309a6a9a89ab232fb
SSDEEP 6144:36jY5b7/yPP3Fm27S92VyxZoketoH98KB:/5b7/y3RO9txB+AB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61a764045daabe15243e13405d418e3f60b6671ee7a1e325c6021204920f741cexe.exe

File Explorer

61a764045daabe15243e13405d418e3f60b6671ee7a1e325c6021204920f741cexe.exe

.exe 257KB

61a764045daabe15243e13405d418e3f60b6671ee7a1e325c6021204920f741cexe.exe

IMPHASH 1c8010f1f4f56ad775e1487631ff77b0
SHA256 61a764045daabe15243e13405d418e3f60b6671ee7a1e325c6021204920f741c
MD5 db63383553451e2108a49e7bd1701f71
SHA1 51e951481a718b95a975a40c0db950699c91ac78
SHA512 32c9dd4a45b9e63bb9bbc58ee2425fd225153cbbbfd442b4196dd1cc2ed8afe52b6d8626f9bb635ef55ccd1192138245325043978e42a55309a6a9a89ab232fb
SSDEEP 6144:36jY5b7/yPP3Fm27S92VyxZoketoH98KB:/5b7/y3RO9txB+AB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

32838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID FindFirstFileW WriteConsoleInputW lstrlenA GetConsoleAliasExesA OpenJobObjectA ReadConsoleA GetConsoleAliasA WaitNamedPipeA SetConsoleScreenBufferSize WriteConsoleInputA AddConsoleAliasW MoveFileWithProgressA ConvertFiberToThread ExpandEnvironmentStringsA GetPrivateProfileStringW GetWindowsDirectoryA GetCompressedFileSizeW CreateActCtxW GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW SetCommConfig FatalAppExitW _hread GetSystemPowerStatus HeapDestroy GetFileAttributesW ReplaceFileW IsDBCSLeadByte GetTimeZoneInformation FindNextVolumeMountPointW VirtualUnlock GetShortPathNameA EnumSystemLocalesA GetConsoleOutputCP GetConsoleAliasesW GetStartupInfoA GetLastError SetLastError GetProcAddress WriteProfileSectionA RemoveDirectoryA CopyFileA GlobalGetAtomNameA SetFileApisToOEM LocalAlloc SetConsoleCtrlHandler CreateEventW GetTapeParameters FoldStringA GlobalFindAtomW GetModuleHandleA SetLocaleInfoW FindNextFileW GetStringTypeW VirtualProtect GetCurrentDirectoryA CompareStringA OpenSemaphoreW ReadConsoleInputW FindFirstVolumeW GetCurrentProcessId MoveFileWithProgressW ReadConsoleOutputCharacterW EnumSystemLocalesW DeleteFileA ExpandEnvironmentStringsW CreateFileW WriteConsoleW InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate HeapSize GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetFilePointer WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle

user32

CharUpperA

Sharing