b63535f7352be95aa04cac64db744cf9[.]exe

General

Target
b63535f7352be95aa04cac64db744cf9.exe
Size 297KB
Sample240203-larecagceq
SHA256 b871eca0f56deec7bc9d2844a15c8f8f963b20281eb43c932764ebf1ca09d3af
MD5 b63535f7352be95aa04cac64db744cf9
SHA1 bf40a14790d4b06424a0550f2a40d37f1da7f18c
SHA512 19acc01ec13f005283dc9349bf139bb59b6437798c8b493acfd40e4b62fb0f5f5ee6c7a333cd6348d8765cb4780c9071007a864633764d1ed05866471143dc3a
SSDEEP 6144:PaL8p0apObesaMBpqTW42ihIvl8rLUdSzesSVEQWQEYN3r:PagS2OSPgpuW42YIvlMUAjSVTW5Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b63535f7352be95aa04cac64db744cf9.exe

File Explorer

b63535f7352be95aa04cac64db744cf9.exe

.exe 297KB

b63535f7352be95aa04cac64db744cf9.exe

IMPHASH 8f96b731d3b2e8140c6b83eb9ffe7545
SHA256 b871eca0f56deec7bc9d2844a15c8f8f963b20281eb43c932764ebf1ca09d3af
MD5 b63535f7352be95aa04cac64db744cf9
SHA1 bf40a14790d4b06424a0550f2a40d37f1da7f18c
SHA512 19acc01ec13f005283dc9349bf139bb59b6437798c8b493acfd40e4b62fb0f5f5ee6c7a333cd6348d8765cb4780c9071007a864633764d1ed05866471143dc3a
SSDEEP 6144:PaL8p0apObesaMBpqTW42ihIvl8rLUdSzesSVEQWQEYN3r:PagS2OSPgpuW42YIvlMUAjSVTW5Y
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\naxuy\80 nahijiyej\xa.pdb

kernel32

InterlockedIncrement GetLogicalDriveStringsW GetFileAttributesExA GetModuleHandleW GetTickCount ReadConsoleW EnumResourceTypesA TlsSetValue LoadLibraryW SetCommConfig FreeConsole GetConsoleWindow GetModuleFileNameW FindNextVolumeMountPointW CreateJobObjectA InterlockedExchange GetLastError SetComputerNameExA VirtualAlloc SetVolumeLabelW RemoveDirectoryA LoadLibraryA OpenMutexA LocalAlloc MoveFileA GetNumberFormatW GlobalFindAtomW GetConsoleTitleW VirtualProtect AddConsoleAliasA GetConsoleProcessList ReadConsoleOutputCharacterW DeleteFileA GetProcAddress GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA RaiseException LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

LoadMenuW

gdi32

GetCharABCWidthsFloatW

Sharing