f5ec76aef3cfc6b4a01388ab14741bc7[.]exe

General

Target
f5ec76aef3cfc6b4a01388ab14741bc7.exe
Size 296KB
Sample240203-larecadhd3
SHA256 835defa7e8a8b6ab86bccaa8e233e8dc6ab8cc5db349bb88e1c5f02dcddca2ce
MD5 f5ec76aef3cfc6b4a01388ab14741bc7
SHA1 fb0ba8e74af5b5c06403663fd05171323cdf4a2f
SHA512 d33985505adece116b678bb4878a55a25787090af6bc00bab46d0f3a8127e0b704ec5d575d234f9733c47295dda89a0ed240386e3389402a856c2098da75740c
SSDEEP 3072:mnWJL1k8kGHUS88ufx1fQVBhaRLnek6pzAbyje+GY084sL3wrmHfHCQxUX7E5rSp:xJL/pHU58u5maLnenTOewGJQSh0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5ec76aef3cfc6b4a01388ab14741bc7.exe

File Explorer

f5ec76aef3cfc6b4a01388ab14741bc7.exe

.exe 296KB

f5ec76aef3cfc6b4a01388ab14741bc7.exe

IMPHASH 11cc60f9b355aa2f5612d8c511ba0361
SHA256 835defa7e8a8b6ab86bccaa8e233e8dc6ab8cc5db349bb88e1c5f02dcddca2ce
MD5 f5ec76aef3cfc6b4a01388ab14741bc7
SHA1 fb0ba8e74af5b5c06403663fd05171323cdf4a2f
SHA512 d33985505adece116b678bb4878a55a25787090af6bc00bab46d0f3a8127e0b704ec5d575d234f9733c47295dda89a0ed240386e3389402a856c2098da75740c
SSDEEP 3072:mnWJL1k8kGHUS88ufx1fQVBhaRLnek6pzAbyje+GY084sL3wrmHfHCQxUX7E5rSp:xJL/pHU58u5maLnenTOewGJQSh0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7887

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sigi\ruso\68_gobap febibom.pdb

kernel32

InterlockedIncrement GetLogicalDriveStringsW GetFileAttributesExA GetModuleHandleW GetTickCount ReadConsoleW EnumResourceTypesA TlsSetValue LoadLibraryW SetCommConfig FreeConsole GetConsoleWindow GetModuleFileNameW FindNextVolumeMountPointW CreateJobObjectA InterlockedExchange GetLastError GetProcAddress SetComputerNameExA SetVolumeLabelW RemoveDirectoryA LoadLibraryA OpenMutexA LocalAlloc MoveFileA GetNumberFormatW GlobalFindAtomW GetConsoleTitleW VirtualProtect GetCurrentProcessId AddConsoleAliasA GetConsoleProcessList ReadConsoleOutputCharacterW DeleteFileA VirtualAlloc GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA RaiseException LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

LoadMenuW

gdi32

GetCharABCWidthsFloatW

Sharing