8f7bc78b3013bcf433841e4abb1b5565[.]exe

General

Target
8f7bc78b3013bcf433841e4abb1b5565.exe
Size 328KB
Sample240201-kce9eshdgj
SHA256 cc3da71857b8b0e55de25cccaa43b3d521866c6f82e29008d7a55b8ed8ef8168
MD5 8f7bc78b3013bcf433841e4abb1b5565
SHA1 46cf2c80661737dcb7477ed606b8766fcbeabb9a
SHA512 1027491d06817c8fb9b073aef59bdee1e12bceec36e21b581cf21e19a0ebb11204a3601dcf68ae4e47214b71f1173dc8ff6d1a87d12f915552e199979d3c058d
SSDEEP 6144:6pluEruJjFzQsXxuRWB0gHgVtgRohURFfnLttb+T7:iIEruJjFvhLZgVtgqifLDbm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f7bc78b3013bcf433841e4abb1b5565.exe

File Explorer

8f7bc78b3013bcf433841e4abb1b5565.exe

.exe 328KB

8f7bc78b3013bcf433841e4abb1b5565.exe

IMPHASH f33a90fe7fcd2447ccf7758f25884a8c
SHA256 cc3da71857b8b0e55de25cccaa43b3d521866c6f82e29008d7a55b8ed8ef8168
MD5 8f7bc78b3013bcf433841e4abb1b5565
SHA1 46cf2c80661737dcb7477ed606b8766fcbeabb9a
SHA512 1027491d06817c8fb9b073aef59bdee1e12bceec36e21b581cf21e19a0ebb11204a3601dcf68ae4e47214b71f1173dc8ff6d1a87d12f915552e199979d3c058d
SSDEEP 6144:6pluEruJjFzQsXxuRWB0gHgVtgRohURFfnLttb+T7:iIEruJjFvhLZgVtgqifLDbm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11681

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsExW GetModuleHandleExA GetLocaleInfoA FindResourceW SystemTimeToTzSpecificLocalTime HeapAlloc EndUpdateResourceW InterlockedIncrement MoveFileExW OpenJobObjectA CreateDirectoryW FreeEnvironmentStringsA GetTickCount EnumCalendarInfoExW GetProcessHeap GetConsoleAliasesA GetSystemTimes WideCharToMultiByte GetConsoleAliasesLengthW LoadLibraryW GetAtomNameW ReadFile CompareStringW GetStartupInfoW WritePrivateProfileStringW GlobalUnfix SetCurrentDirectoryA GetLastError GetProcAddress CreateNamedPipeA LoadLibraryA OpenWaitableTimerW LocalAlloc GetCurrentDirectoryA LocalFileTimeToFileTime EnumSystemLocalesA GetUserDefaultLCID SetDefaultCommConfigA GetVolumeInformationA PulseEvent HeapFree EncodePointer DecodePointer GetCommandLineW HeapSetInformation RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate HeapDestroy Sleep HeapSize GetModuleHandleW ExitProcess EnterCriticalSection LeaveCriticalSection WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle WriteConsoleW SetStdHandle CreateFileW IsValidLocale

user32

DestroyIcon

advapi32

DuplicateToken ReadEventLogA

Sharing