7c0b88535c506fc8bec1510f08f3329c[.]exe

General

Target
7c0b88535c506fc8bec1510f08f3329c.exe
Size 320KB
Sample240205-nmpsdseeg5
SHA256 7f2b4169d20bb191467b02abcae4dbc05e80bb5a20aece8e3d04aac7f05b0382
MD5 7c0b88535c506fc8bec1510f08f3329c
SHA1 026965f027f53725e0e93d069a7143d12badd35c
SHA512 3e5d80f017b99e556a2ce8ac1849ac52e5e1ec38812d015e1dd8e4c276c45e3b5462ca0961d3c806113266b130b350fc993f6734a07a093a5a50bccc7c5f160b
SSDEEP 6144:i88LuFIhUJfTi0aFS8t4pcABVjtRYkM+:18SFIhUJLWDap/B1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c0b88535c506fc8bec1510f08f3329c.exe

File Explorer

7c0b88535c506fc8bec1510f08f3329c.exe

.exe 320KB

7c0b88535c506fc8bec1510f08f3329c.exe

IMPHASH 8c20896f0a15a2bc693d2f11c2ab744a
SHA256 7f2b4169d20bb191467b02abcae4dbc05e80bb5a20aece8e3d04aac7f05b0382
MD5 7c0b88535c506fc8bec1510f08f3329c
SHA1 026965f027f53725e0e93d069a7143d12badd35c
SHA512 3e5d80f017b99e556a2ce8ac1849ac52e5e1ec38812d015e1dd8e4c276c45e3b5462ca0961d3c806113266b130b350fc993f6734a07a093a5a50bccc7c5f160b
SSDEEP 6144:i88LuFIhUJfTi0aFS8t4pcABVjtRYkM+:18SFIhUJLWDap/B1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9343

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\colovozicozugu\nafimar.pdb

kernel32

SetWaitableTimer InterlockedIncrement AddConsoleAliasW GetModuleHandleW GetTickCount FindNextVolumeMountPointA TlsSetValue LoadLibraryW SetCommConfig AssignProcessToJobObject WriteConsoleW GetModuleFileNameW CreateJobObjectA InterlockedExchange GetLogicalDriveStringsA GetLastError GetProcAddress VirtualAlloc SetComputerNameExA LoadLibraryA OpenMutexA LocalAlloc MoveFileA GetNumberFormatW RemoveDirectoryW GlobalFindAtomW EnumResourceTypesW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentProcessId UnregisterWaitEx DeleteFileA GetVolumeInformationW SetVolumeLabelW GetSystemDefaultLangID FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA RaiseException HeapAlloc HeapReAlloc HeapSize RtlUnwind GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

user32

LoadMenuW

gdi32

GetCharABCWidthsFloatW

winhttp

WinHttpSetOption

Sharing