0141234b91988ec9abae7f93fa083835[.]exe

General

Target
0141234b91988ec9abae7f93fa083835.exe
Size 299KB
Sample240221-bmsstsha3v
SHA256 2515eaa2524af3e606406d5e0b7d20565d6c1a2a06903a4ff0d0fceaba7414b8
MD5 0141234b91988ec9abae7f93fa083835
SHA1 233bb6dccd5398637420312eebdc79c77ec2c6be
SHA512 d81765d14dedfbc341f1b02d6688a13753d6724e4861bccead9bf3a7a2dd427001d3df492962aa639740130f8d11463074fa2edb3b602764e10571aba015ba53
SSDEEP 6144:WSWXZbqf5jOI9ldcNqqDrlXI5uLbzA1XD36XKI:WLXZbqhjOI9lqNRDreuAQt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0141234b91988ec9abae7f93fa083835.exe

File Explorer

0141234b91988ec9abae7f93fa083835.exe

.exe .ps1 299KB

0141234b91988ec9abae7f93fa083835.exe

IMPHASH 67249dba00354a5d46556d718ee3a4c3
SHA256 2515eaa2524af3e606406d5e0b7d20565d6c1a2a06903a4ff0d0fceaba7414b8
MD5 0141234b91988ec9abae7f93fa083835
SHA1 233bb6dccd5398637420312eebdc79c77ec2c6be
SHA512 d81765d14dedfbc341f1b02d6688a13753d6724e4861bccead9bf3a7a2dd427001d3df492962aa639740130f8d11463074fa2edb3b602764e10571aba015ba53
SSDEEP 6144:WSWXZbqf5jOI9ldcNqqDrlXI5uLbzA1XD36XKI:WLXZbqhjOI9lqNRDreuAQt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5591

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA LocalUnlock GetConsoleAliasesLengthW WriteConsoleOutputCharacterA InterlockedDecrement CreateDirectoryW GetSystemDefaultLCID TzSpecificLocalTimeToSystemTime GetProcessTimes LoadLibraryW GetLocaleInfoW FatalAppExitW SetConsoleCP HeapDestroy ReplaceFileA FlushFileBuffers GetConsoleAliasesW ChangeTimerQueueTimer SetLastError GetProcAddress CreateNamedPipeA SetStdHandle PrepareTape ResetEvent LoadLibraryA LocalAlloc AddAtomA DebugSetProcessKillOnExit lstrcatW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FileTimeToLocalFileTime SetFileAttributesW GetVolumeInformationW WriteConsoleW CloseHandle SetFilePointer GetConsoleMode GetConsoleCP HeapAlloc EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate Sleep HeapSize EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc RtlUnwind HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW CreateFileW

user32

GetForegroundWindow GetClassLongA

ole32

CreateDataAdviseHolder

Sharing