4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300[.]exe

General

Target
4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300.exe
Size 288KB
Sample240215-fxr2haac29
SHA256 4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300
MD5 e88da5d3f528d78eabc2de83797c2195
SHA1 7937c0b3fac48fa50aa74e80387a6ff6f463c978
SHA512 4dfb673cfab033d7d40ef383ef36841d3c8fd1a1f2c80bfd05c896aa3d9c38c08301d89e4543e9b300a44787c9a57a13e34654f5374d6788c1e56e37c69be9a9
SSDEEP 3072:OziRfFi3WzI2OfoyFIUVvBmAx0H3q0eJ5cLw5p0s0hQUxaIa2VM:/RfFDG3FJVvtyeJ5JKQUxaIh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300.exe

File Explorer

4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300.exe

.exe 288KB

4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300.exe

IMPHASH 7a16202dd7202181174ee4ca5dc3433f
SHA256 4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300
MD5 e88da5d3f528d78eabc2de83797c2195
SHA1 7937c0b3fac48fa50aa74e80387a6ff6f463c978
SHA512 4dfb673cfab033d7d40ef383ef36841d3c8fd1a1f2c80bfd05c896aa3d9c38c08301d89e4543e9b300a44787c9a57a13e34654f5374d6788c1e56e37c69be9a9
SSDEEP 3072:OziRfFi3WzI2OfoyFIUVvBmAx0H3q0eJ5cLw5p0s0hQUxaIa2VM:/RfFDG3FJVvtyeJ5JKQUxaIh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime CreateDirectoryW GetComputerNameW SetEvent FreeEnvironmentStringsA GetTickCount GetConsoleAliasesA LoadLibraryW WriteConsoleOutputA HeapDestroy GetTimeZoneInformation ReplaceFileA FlushFileBuffers SetCurrentDirectoryA GetLastError GetCurrentDirectoryW GetProcAddress CreateNamedPipeA LoadLibraryA LocalAlloc AddAtomW SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA FreeEnvironmentStringsW VirtualProtect EnumDateFormatsW CompareStringA FatalAppExitA IsValidLocale EnumSystemLocalesA HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW HeapCreate EncodePointer EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize HeapReAlloc GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA RaiseException

user32

GetClassLongA

Name

.text

Size

157KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

39.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.buk

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mojoput

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vopa

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

104KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4b06c62c07429d0bbc7f9126a18c2e959e5c52c09236dbfb5b16a09390f0a300.exe

kernel32

user32

generic