d0f3fda9bfe96872981a8de4ef913856[.]exe

General

Target
d0f3fda9bfe96872981a8de4ef913856.exe
Size 287KB
Sample240214-r2fd2sdd4y
SHA256 a7b430e703fe6d3cdebfd2924e992abf89a959fee3afe83d91a68c87f7783eef
MD5 d0f3fda9bfe96872981a8de4ef913856
SHA1 d41a417994e15fa010cfb252d25e7ffbfe88bc39
SHA512 461121c77953447cf75fcb71d25d0ce7306c4b09e4db0d2c5aecb1d74105fa76f14864b0d012e7969e1f5e3a343ce7c8c2d9d0f37172030daf072e7f1013f080
SSDEEP 3072:6ziRfFi3WzI2OHDbNMCicIQ1yEqkAhDexm0sCfCPvlZg2J5aLwutfUxaIa2VM:DRfFD6OCxFyEqkjxm0sCuZJJ5OUxaIh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0f3fda9bfe96872981a8de4ef913856.exe

File Explorer

d0f3fda9bfe96872981a8de4ef913856.exe

.exe 287KB

d0f3fda9bfe96872981a8de4ef913856.exe

IMPHASH 7a16202dd7202181174ee4ca5dc3433f
SHA256 a7b430e703fe6d3cdebfd2924e992abf89a959fee3afe83d91a68c87f7783eef
MD5 d0f3fda9bfe96872981a8de4ef913856
SHA1 d41a417994e15fa010cfb252d25e7ffbfe88bc39
SHA512 461121c77953447cf75fcb71d25d0ce7306c4b09e4db0d2c5aecb1d74105fa76f14864b0d012e7969e1f5e3a343ce7c8c2d9d0f37172030daf072e7f1013f080
SSDEEP 3072:6ziRfFi3WzI2OHDbNMCicIQ1yEqkAhDexm0sCfCPvlZg2J5aLwutfUxaIa2VM:DRfFD6OCxFyEqkjxm0sCuZJJ5OUxaIh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime CreateDirectoryW GetComputerNameW SetEvent FreeEnvironmentStringsA GetTickCount GetConsoleAliasesA LoadLibraryW WriteConsoleOutputA HeapDestroy GetTimeZoneInformation ReplaceFileA FlushFileBuffers SetCurrentDirectoryA GetLastError GetCurrentDirectoryW GetProcAddress CreateNamedPipeA LoadLibraryA LocalAlloc AddAtomW SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA FreeEnvironmentStringsW VirtualProtect EnumDateFormatsW CompareStringA FatalAppExitA IsValidLocale EnumSystemLocalesA HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW HeapCreate EncodePointer EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize HeapReAlloc GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA RaiseException

user32

GetClassLongA

Name

.text

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

39.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.howeg

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zozaja

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.davoke

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

104KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d0f3fda9bfe96872981a8de4ef913856.exe

kernel32

user32

generic