662bcd1f5ad0f99508002d4562f42869[.]exe

General

Target
662bcd1f5ad0f99508002d4562f42869.exe
Size 233KB
Sample240209-s1cgfaeb96
SHA256 782bdfd0de0d78f62dc62dbfc64e50e0f1dbaecf04340fdd41aa2da00e0ccdbc
MD5 662bcd1f5ad0f99508002d4562f42869
SHA1 4e1d6a634ad1de7a5cbbb4f0cc02280c5b01e832
SHA512 7e76bed5e1274e73722c51589f32e445c9ca6f59c1a2e8f460b16890aa615387e08eaab812ff21e82dbe78479054678e004ab3134195b7e4bc596ca0258996e2
SSDEEP 3072:RNS+H6SLytAwHtxNIN3N3QRlCR/rjbeIXMoZjnO34Gtgc9t8Xk+5YQ0o/8B:1aSLy7tML3QRlYrjVDL1c9eAQ9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
662bcd1f5ad0f99508002d4562f42869.exe

File Explorer

662bcd1f5ad0f99508002d4562f42869.exe

.exe 233KB

662bcd1f5ad0f99508002d4562f42869.exe

IMPHASH 4696cd4eba2b1db3a82c2253e8f38d96
SHA256 782bdfd0de0d78f62dc62dbfc64e50e0f1dbaecf04340fdd41aa2da00e0ccdbc
MD5 662bcd1f5ad0f99508002d4562f42869
SHA1 4e1d6a634ad1de7a5cbbb4f0cc02280c5b01e832
SHA512 7e76bed5e1274e73722c51589f32e445c9ca6f59c1a2e8f460b16890aa615387e08eaab812ff21e82dbe78479054678e004ab3134195b7e4bc596ca0258996e2
SSDEEP 3072:RNS+H6SLytAwHtxNIN3N3QRlCR/rjbeIXMoZjnO34Gtgc9t8Xk+5YQ0o/8B:1aSLy7tML3QRlYrjVDL1c9eAQ9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hefujawasotab we.pdb

kernel32

InterlockedCompareExchange SetComputerNameW AddConsoleAliasW GetComputerNameW GetTickCount GetNumberFormatA GetUserDefaultLangID GlobalFindAtomA AssignProcessToJobObject GetSystemPowerStatus VerifyVersionInfoA CompareStringW GetLogicalDriveStringsA GetLastError GetProcAddress FindResourceA MoveFileW LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc RemoveDirectoryW SetFileApisToANSI QueryDosDeviceW EnumResourceTypesW CreateWaitableTimerW GetConsoleTitleW VirtualProtect GetFileAttributesExW DeleteFileW GetCurrentProcessId GetFileInformationByHandle GetVolumeInformationW VirtualAlloc GetTempFileNameW CreateFileA GetModuleHandleW Sleep ExitProcess GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA RaiseException RtlUnwind HeapAlloc HeapReAlloc HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle GetConsoleOutputCP WriteConsoleW SetStdHandle

gdi32

GetCharABCWidthsFloatW

winhttp

WinHttpWriteData

Sharing