74b2a3fce09943389941e572722057b1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
74b2a3fce09943389941e572722057b1.exe
Size 230KB
Sample240114-eshftschd3
SHA256 a872d94a56b33329d5b685a2597589dce5d0296fc7905af4dded6573ce626999
MD5 74b2a3fce09943389941e572722057b1
SHA1 a9f57f7b0d96ed8423ddda5cc7f268f37cb4836e
SHA512 e8e705c4c9f75b87d50e5462d230f5245c9c64ef94997fddf8cc7d29394fb93c409af06eca0913d4d192e2c82cade534db7555582fc0f7998ad30467e8c0f314
SSDEEP 3072:2nsQvtqZALXadUs0vEJimn1K29U4HUwNFD2SRR8G3UxS6MeILYS:2nskPjfr4HUiD0G3U2eILY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74b2a3fce09943389941e572722057b1.exe

File Explorer

74b2a3fce09943389941e572722057b1.exe

.exe 230KB

74b2a3fce09943389941e572722057b1.exe

IMPHASH 691a82025742b16964fc0a05536242f1
SHA256 a872d94a56b33329d5b685a2597589dce5d0296fc7905af4dded6573ce626999
MD5 74b2a3fce09943389941e572722057b1
SHA1 a9f57f7b0d96ed8423ddda5cc7f268f37cb4836e
SHA512 e8e705c4c9f75b87d50e5462d230f5245c9c64ef94997fddf8cc7d29394fb93c409af06eca0913d4d192e2c82cade534db7555582fc0f7998ad30467e8c0f314
SSDEEP 3072:2nsQvtqZALXadUs0vEJimn1K29U4HUwNFD2SRR8G3UxS6MeILYS:2nskPjfr4HUiD0G3U2eILY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10399

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetTimeFormatA FreeEnvironmentStringsA GetModuleHandleW GetTickCount VirtualFree LoadLibraryW GetAtomNameW GetMailslotInfo LCMapStringA GetConsoleOutputCP GetConsoleAliasesW GetLastError GetProcAddress GetLongPathNameA GetTapeStatus GetConsoleAliasExesLengthA HeapSize LoadLibraryA LocalAlloc SetCalendarInfoW WritePrivateProfileStringA GetModuleFileNameA lstrcatW FreeEnvironmentStringsW CompareStringA LocalFree CompareStringW GetTimeZoneInformation GetLocaleInfoW LCMapStringW GetStringTypeW TlsGetValue GetLocaleInfoA GetProcessHeaps TryEnterCriticalSection MultiByteToWideChar GetStringTypeA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetCurrentThread Sleep ExitProcess WriteFile GetStdHandle GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetEnvironmentVariableA

user32

GetMonitorInfoA GetForegroundWindow GetKeyboardType LookupIconIdFromDirectory

gdi32

GetBoundsRect

advapi32

ObjectPrivilegeAuditAlarmA

ole32

CreateDataCache