6958ACC382E71103A0B83D20BBBB37D2[.]exe

Target
6958ACC382E71103A0B83D20BBBB37D2.exe
Size 232KB
Sample240223-r2gbcabb95
SHA256 078f586ebb8a22305540fb5982b2521f1b82e4317f286e13bab680fff0a9d164
MD5 6958acc382e71103a0b83d20bbbb37d2
SHA1 65bf64dfcabf7bc83e47ffc4360cda022d4dab34
SHA512 ebfa8b6986630b3502409d38cdff54881e4bce48511c7ba4f027345296c29708112c19ec6c9181c4b0188fa1f5cbe17b3c5d44dc07f33858323c677ef9caaeae
SSDEEP 3072:FdfbYSFlTBL/A9OYh6++4hY7gfv9yPQxAVUmZAzsqvj1letKv/jbNRKCnrQbW:PbYSFH/AYYh9vERVUmSAQj1la9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6958ACC382E71103A0B83D20BBBB37D2.exe

File Explorer

6958ACC382E71103A0B83D20BBBB37D2.exe

.exe 232KB

6958ACC382E71103A0B83D20BBBB37D2.exe

IMPHASH b54b7baaa544e146111c234c4d3b827d
SHA256 078f586ebb8a22305540fb5982b2521f1b82e4317f286e13bab680fff0a9d164
MD5 6958acc382e71103a0b83d20bbbb37d2
SHA1 65bf64dfcabf7bc83e47ffc4360cda022d4dab34
SHA512 ebfa8b6986630b3502409d38cdff54881e4bce48511c7ba4f027345296c29708112c19ec6c9181c4b0188fa1f5cbe17b3c5d44dc07f33858323c677ef9caaeae
SSDEEP 3072:FdfbYSFlTBL/A9OYh6++4hY7gfv9yPQxAVUmZAzsqvj1letKv/jbNRKCnrQbW:PbYSFH/AYYh9vERVUmSAQj1la9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8803

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xomucirup-nebin.pdb

kernel32

QueryDosDeviceA InterlockedCompareExchange AddConsoleAliasW GetComputerNameW CreateDirectoryExA GetFileAttributesExA GetTickCount GetNumberFormatA GetConsoleTitleA GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW GetConsoleAliasW InterlockedDecrement SetLastError GetProcAddress VirtualAlloc HeapSize RemoveDirectoryA SetComputerNameA LoadLibraryA GetFileType SetFileApisToANSI EnumResourceTypesW GetModuleHandleA CreateWaitableTimerW GetCurrentProcessId GetVolumeInformationW CreateFileA GlobalDeleteAtom GetTempFileNameW WriteConsoleW GetComputerNameA GetCommandLineA GetStartupInfoA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError Sleep ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection HeapFree SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile SetStdHandle GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle

user32

EnableWindow CharUpperBuffW

advapi32

DeregisterEventSource DeleteAce AreAllAccessesGranted

Resubmissions

Sharing

General