bb42b12cdcf63fc557600c06eece3855550af6c016debc06d6cd6c9a22d662e4[.]exe

General

Target
bb42b12cdcf63fc557600c06eece3855550af6c016debc06d6cd6c9a22d662e4.exe
Size 251KB
Sample240207-qws8aahbc3
SHA256 bb42b12cdcf63fc557600c06eece3855550af6c016debc06d6cd6c9a22d662e4
MD5 a92e3e1c44a6fa5384832ab5769b94fd
SHA1 4f8d3c5b070e2280cda054ba6c1aec5d66628375
SHA512 355b2c80aa7aab59533ca784f25202cfa13cb1b126a08ea05d2f0256c6ee4d8c05eb56aecacc37b83f424512f8e0d3721a2be417ba1dcde9cab026ef8a238ab6
SSDEEP 3072:z9DHvricPLFwN7wi0ktkuthDT/SJfa2rht60Qk07UGtBH0MbJz6yhTn+57UjpWTs:zLORwiwuDADeGAUGjUymyhQaWT2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb42b12cdcf63fc557600c06eece3855550af6c016debc06d6cd6c9a22d662e4.exe

File Explorer

bb42b12cdcf63fc557600c06eece3855550af6c016debc06d6cd6c9a22d662e4.exe

.exe 251KB

bb42b12cdcf63fc557600c06eece3855550af6c016debc06d6cd6c9a22d662e4.exe

IMPHASH 8c68e70cc24d87305de76ebb23297bcf
SHA256 bb42b12cdcf63fc557600c06eece3855550af6c016debc06d6cd6c9a22d662e4
MD5 a92e3e1c44a6fa5384832ab5769b94fd
SHA1 4f8d3c5b070e2280cda054ba6c1aec5d66628375
SHA512 355b2c80aa7aab59533ca784f25202cfa13cb1b126a08ea05d2f0256c6ee4d8c05eb56aecacc37b83f424512f8e0d3721a2be417ba1dcde9cab026ef8a238ab6
SSDEEP 3072:z9DHvricPLFwN7wi0ktkuthDT/SJfa2rht60Qk07UGtBH0MbJz6yhTn+57UjpWTs:zLORwiwuDADeGAUGjUymyhQaWT2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lemanafip94\kofa\bami_6\cezoxir kokujupi-dawovewaxavus\dub.pdb

kernel32

ReadConsoleOutputAttribute CreateJobObjectW AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount LoadLibraryW WriteConsoleW GetStartupInfoW GetLastError SetLastError GetProcAddress AttachConsole VirtualAlloc SetVolumeLabelW SetComputerNameExA RemoveDirectoryA LoadLibraryA InterlockedExchangeAdd LocalAlloc QueryDosDeviceW FindNextChangeNotification GlobalFindAtomW GetModuleFileNameA FindFirstVolumeMountPointA PurgeComm DeleteFileW GetCurrentProcessId MoveFileWithProgressW DebugBreak MoveFileW GetSystemDefaultLangID MultiByteToWideChar Sleep ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA HeapAlloc HeapReAlloc LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RtlUnwind

advapi32

SetKernelObjectSecurity

Sharing