270d3f441e678ec516527bf25c20023d[.]exe

General

Target
270d3f441e678ec516527bf25c20023d.exe
Size 261KB
Sample240228-cbbwlsgf23
SHA256 d6567cc8e6b82d69347065de9fa8c7d2441ee63185ac52fe0e5e4bc6b2642910
MD5 270d3f441e678ec516527bf25c20023d
SHA1 4664604103288d56244609208fd8de851a5599a0
SHA512 b534d84edfd01c4e926b65ba0ddc6604954ef025a012ef6ae1c33e54ee912fcc9f206fd1b4f82247be2938c38716ee13f643d40da4a18290097d9459532cb8c1
SSDEEP 3072:rHYuRgCFBQh1Sjw67WXFsFk3zXnE20P+UX/Ig5JiT+yx:DFw1SjBWVsGz3E/+QQAiT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
270d3f441e678ec516527bf25c20023d.exe

File Explorer

270d3f441e678ec516527bf25c20023d.exe

.exe 261KB

270d3f441e678ec516527bf25c20023d.exe

IMPHASH a24ea59447df74f26ce8c1567f650e9c
SHA256 d6567cc8e6b82d69347065de9fa8c7d2441ee63185ac52fe0e5e4bc6b2642910
MD5 270d3f441e678ec516527bf25c20023d
SHA1 4664604103288d56244609208fd8de851a5599a0
SHA512 b534d84edfd01c4e926b65ba0ddc6604954ef025a012ef6ae1c33e54ee912fcc9f206fd1b4f82247be2938c38716ee13f643d40da4a18290097d9459532cb8c1
SSDEEP 3072:rHYuRgCFBQh1Sjw67WXFsFk3zXnE20P+UX/Ig5JiT+yx:DFw1SjBWVsGz3E/+QQAiT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nefos\zahibamek58_sadehiweho.pdb

kernel32

InterlockedIncrement ReadConsoleA GetCurrentProcess GetComputerNameW CreateDirectoryExA GetTickCount FindNextVolumeMountPointA ReadConsoleW GetConsoleAliasExesW GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetConsoleAliasExesLengthW GetTimeFormatW GetConsoleAliasW FlushFileBuffers GetLastError SetLastError GetProcAddress SetComputerNameExA RemoveDirectoryA SetStdHandle GetTempFileNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd SetConsoleCtrlHandler GetNumberFormatW GetModuleHandleA GetConsoleTitleW GetFileAttributesExW ReadConsoleInputW AddConsoleAliasA CreateThread CloseHandle VirtualAlloc CreateFileA HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree RaiseException DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharUpperBuffA GetAltTabInfoA SetMenu LoadKeyboardLayoutW

advapi32

RegSetValueA

Sharing