cfDqE00R1M2FHvud1UskY7La[.]exe

General

Target
cfDqE00R1M2FHvud1UskY7La.exe
Size 253KB
Sample240216-w92dpseh32
SHA256 0ce20355c39691f815eca3acf7e9e6addd4e8e2159297e4afbceef64111a0837
MD5 b111b74a7f2979a517bfe4fb6c88fe80
SHA1 a1e05cb369ed0a24a9aff8066514ede7cd17dba6
SHA512 8ff611cd56cd67401c2b1be62ee0d751105f869da0114cf81f8f60b23f615a4f73ca687e812dd9c5005083c22c979cb37ae7318d641c272cc0707257dd0c9b51
SSDEEP 3072:Ib0S8j2zIWWnnMe8TEzBlgkVJ3xlrI6QDJ170Z2z7DlT:IbXC28ZMePakV7/QDzp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfDqE00R1M2FHvud1UskY7La.exe

File Explorer

cfDqE00R1M2FHvud1UskY7La.exe

.exe 253KB

cfDqE00R1M2FHvud1UskY7La.exe

IMPHASH 701b7eda6b324e6e9073377243e2004c
SHA256 0ce20355c39691f815eca3acf7e9e6addd4e8e2159297e4afbceef64111a0837
MD5 b111b74a7f2979a517bfe4fb6c88fe80
SHA1 a1e05cb369ed0a24a9aff8066514ede7cd17dba6
SHA512 8ff611cd56cd67401c2b1be62ee0d751105f869da0114cf81f8f60b23f615a4f73ca687e812dd9c5005083c22c979cb37ae7318d641c272cc0707257dd0c9b51
SSDEEP 3072:Ib0S8j2zIWWnnMe8TEzBlgkVJ3xlrI6QDJ170Z2z7DlT:IbXC28ZMePakV7/QDzp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6057

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc SystemTimeToFileTime SetEvent CreateNamedPipeW GetConsoleAliasesLengthA WriteFile TzSpecificLocalTimeToSystemTime LoadLibraryW GetLocaleInfoW AssignProcessToJobObject ReplaceFileA FlushFileBuffers CreateDirectoryA GetConsoleAliasesW GetLastError WriteConsoleOutputCharacterW SetLastError lstrcmpiA GetProcAddress LoadLibraryA GetProcessWorkingSetSize LocalAlloc AddAtomW EraseTape FreeEnvironmentStringsW VirtualProtect EnumDateFormatsW FatalAppExitA EnumSystemLocalesA GetLocaleInfoA GetCurrentDirectoryW GetComputerNameA GetUserDefaultLCID CreateFileW EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy Sleep HeapSize EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapReAlloc RtlUnwind HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle WriteConsoleW SetStdHandle IsValidLocale

user32

GetClassLongW

advapi32

AccessCheckByType

ole32

CreateDataAdviseHolder

Sharing