ec88c05e8d2e697b023514bade68e311[.]exe

General

Target
ec88c05e8d2e697b023514bade68e311.exe
Size 256KB
Sample240112-mv5cdaeddl
SHA256 c7cc77635eee4026d68f94cecbd1b92793de6ff0d8506c74b9c3a4bfe0c19541
MD5 ec88c05e8d2e697b023514bade68e311
SHA1 c647c59017b6ded3bfb639c5067118ffd3142d58
SHA512 fb66f956d5ec99be95d80dcacc417273e240cd94f9ca666548e5d1ca26234dfc3f8bbdb11631fa08f7f0889867ddb48188d3f9a616ee8aac07d375a7a6be4a7c
SSDEEP 3072:1HfC5wqLWOLlsOS24ZV1TJi9N1K4SummXbjvyhQV+KCydsSzPCRs2JXKYkX8GRk4:VfCjLkZV13ijeQVv356nTcJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec88c05e8d2e697b023514bade68e311.exe

File Explorer

ec88c05e8d2e697b023514bade68e311.exe

.exe 256KB

ec88c05e8d2e697b023514bade68e311.exe

IMPHASH 7b1df25cb3b9a53041bb12b024d69535
SHA256 c7cc77635eee4026d68f94cecbd1b92793de6ff0d8506c74b9c3a4bfe0c19541
MD5 ec88c05e8d2e697b023514bade68e311
SHA1 c647c59017b6ded3bfb639c5067118ffd3142d58
SHA512 fb66f956d5ec99be95d80dcacc417273e240cd94f9ca666548e5d1ca26234dfc3f8bbdb11631fa08f7f0889867ddb48188d3f9a616ee8aac07d375a7a6be4a7c
SSDEEP 3072:1HfC5wqLWOLlsOS24ZV1TJi9N1K4SummXbjvyhQV+KCydsSzPCRs2JXKYkX8GRk4:VfCjLkZV13ijeQVv356nTcJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8858

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalUnlock TlsGetValue HeapFree FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesA LoadLibraryW GetLocaleInfoW GetAtomNameW CompareStringW LCMapStringA GetConsoleOutputCP GetLastError GetProcAddress GetLongPathNameA CreateNamedPipeA SetComputerNameA OpenWaitableTimerA LoadLibraryA LocalAlloc SetCurrentDirectoryW VirtualLock FindAtomA GetModuleFileNameA CreateWaitableTimerW DebugBreakProcess DeleteCriticalSection LocalFree SetFileAttributesW GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW WideCharToMultiByte LCMapStringW GetTimeZoneInformation CompareStringA SetEnvironmentVariableA

Name

.text

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

33KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wedakug

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

417B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ec88c05e8d2e697b023514bade68e311.exe

kernel32

generic