ab14f43efa13365143d763e08f28e482[.]exe

General

Target
ab14f43efa13365143d763e08f28e482.exe
Size 239KB
Sample240121-ktvqfahhap
SHA256 6c625069f2f2e6815a0c542e749b12678876af8e954ec6ebd2244d2f4eba99d0
MD5 ab14f43efa13365143d763e08f28e482
SHA1 cf0e89f91a9ba4008898d13d29894389fbfc9465
SHA512 86482f43857f66a7bf2fabc30af0f3767442d4d7da95c012fc083c10af73519a9706e06501fa5520fa0e2526098c9956fd80d19b341ee4413e3c9b8e49dec57e
SSDEEP 3072:chSLF4J1ow73jLyC3pvPd9Ho78bur3HIDvsYlsbEnoMtmIozTD5y4Ir:chdTjLyC3pvPDsrXaFnoMtOzw9r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab14f43efa13365143d763e08f28e482.exe

File Explorer

ab14f43efa13365143d763e08f28e482.exe

.exe 239KB

ab14f43efa13365143d763e08f28e482.exe

IMPHASH e0e4d350eec84bd11f6f18b6d0e645d0
SHA256 6c625069f2f2e6815a0c542e749b12678876af8e954ec6ebd2244d2f4eba99d0
MD5 ab14f43efa13365143d763e08f28e482
SHA1 cf0e89f91a9ba4008898d13d29894389fbfc9465
SHA512 86482f43857f66a7bf2fabc30af0f3767442d4d7da95c012fc083c10af73519a9706e06501fa5520fa0e2526098c9956fd80d19b341ee4413e3c9b8e49dec57e
SSDEEP 3072:chSLF4J1ow73jLyC3pvPd9Ho78bur3HIDvsYlsbEnoMtmIozTD5y4Ir:chdTjLyC3pvPDsrXaFnoMtOzw9r
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FillConsoleOutputCharacterA FindResourceA GetConsoleAliasesLengthW InterlockedDecrement QueryDosDeviceA SetComputerNameW GetModuleHandleW GetTickCount VirtualFree LoadLibraryW ReadConsoleInputA FreeConsole SetComputerNameExW GetStartupInfoW GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc MoveFileA CreateHardLinkW FindNextChangeNotification GlobalFindAtomW PurgeComm GetCurrentProcessId DebugBreak ResetWriteWatch ReadConsoleOutputCharacterW OpenFileMappingA DeleteFileA WriteConsoleW MultiByteToWideChar Sleep ExitProcess GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection RtlUnwind HeapFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CloseHandle CreateFileA HeapAlloc HeapReAlloc HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

user32

GetWindowTextLengthA GetKeyNameTextA

Sharing