138a318d5ec73f981d7f5fe0e96c9011[.]exe

General

Target
138a318d5ec73f981d7f5fe0e96c9011.exe
Size 285KB
Sample240205-akfvtaece8
SHA256 a022daaa10f66f7870e535d0cb76290e5d3d6bba6e73708673c528bdb1417215
MD5 138a318d5ec73f981d7f5fe0e96c9011
SHA1 35683552317016fcae123a8f4c50857bf7b3b7ba
SHA512 da8fcd5d1d6c46a1bbdee79b94bae71c5f1d07aab37aaa8b8562c9c9e4e1df4fe13207a7027ea41eeab99e7d127bda1b45f8652a9dc24ce169f6138e676c9066
SSDEEP 6144:95nAzlTq8VHdUMyc9R43+6I8r8xfsD1lu1s:95nAzleYHM3fIfJsD1lu2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
138a318d5ec73f981d7f5fe0e96c9011.exe

File Explorer

138a318d5ec73f981d7f5fe0e96c9011.exe

.exe 285KB

138a318d5ec73f981d7f5fe0e96c9011.exe

IMPHASH 4f1b3bf8bd66597d926a89d7a07a5f88
SHA256 a022daaa10f66f7870e535d0cb76290e5d3d6bba6e73708673c528bdb1417215
MD5 138a318d5ec73f981d7f5fe0e96c9011
SHA1 35683552317016fcae123a8f4c50857bf7b3b7ba
SHA512 da8fcd5d1d6c46a1bbdee79b94bae71c5f1d07aab37aaa8b8562c9c9e4e1df4fe13207a7027ea41eeab99e7d127bda1b45f8652a9dc24ce169f6138e676c9066
SSDEEP 6144:95nAzlTq8VHdUMyc9R43+6I8r8xfsD1lu1s:95nAzleYHM3fIfJsD1lu2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement MoveFileExW OpenJobObjectA SetDefaultCommConfigW CreateDirectoryW FreeEnvironmentStringsA GetTickCount GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GetSystemTimes WideCharToMultiByte LoadLibraryW GetLocaleInfoW CompareStringW GetStartupInfoW WritePrivateProfileStringW FlushFileBuffers GetConsoleAliasesW EndUpdateResourceW SetLastError GetProcAddress GetProcessHeaps CreateNamedPipeA EnumDateFormatsExA ResetEvent OpenWaitableTimerA LoadLibraryA GetProcessWorkingSetSize LocalAlloc DnsHostnameToComputerNameA FreeEnvironmentStringsW GetCurrentDirectoryA FileTimeToLocalFileTime GetVolumeInformationW IsValidLocale EnumSystemLocalesA GetLocaleInfoA HeapAlloc SetCurrentDirectoryA GetModuleHandleExA EncodePointer DecodePointer GetCommandLineA HeapSetInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy Sleep HeapSize EnterCriticalSection LeaveCriticalSection GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapReAlloc RtlUnwind HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID RaiseException

user32

DestroyIcon GetClassLongW

advapi32

ReadEventLogA GetServiceKeyNameA

Name

.text

Size

197KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.piv

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vuje

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

60KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

138a318d5ec73f981d7f5fe0e96c9011.exe

kernel32

user32

advapi32

generic