fb8ddd837ad8b94f1faf0b4920ce7b2b[.]exe

General

Target
fb8ddd837ad8b94f1faf0b4920ce7b2b.exe
Size 161KB
Sample240306-q8ntbscd7s
SHA256 29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee
MD5 fb8ddd837ad8b94f1faf0b4920ce7b2b
SHA1 c3bc51f18a1180be27c4ee0978aaa9e1295dbd4b
SHA512 db218213ee139583f69b00ea7e33986857cbc73f0e549f996e0dc3b0b34282c838f874a65c13fa7e21adfb8d876ca6cef9421a19171c214b1ea98b1a99f1bc74
SSDEEP 1536:IwYZ5gZyjech8y/nK/bobGPgeMWKQxljH3PBe/8YkfbM9Wzw1mE3SmJQENYmAzTa:YiZpyDz/WVPX/9CWz9xmJQMYmAzsX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8ddd837ad8b94f1faf0b4920ce7b2b.exe

File Explorer

fb8ddd837ad8b94f1faf0b4920ce7b2b.exe

.exe 161KB

fb8ddd837ad8b94f1faf0b4920ce7b2b.exe

IMPHASH efddc832809352fa5626b950f8ce5fce
SHA256 29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee
MD5 fb8ddd837ad8b94f1faf0b4920ce7b2b
SHA1 c3bc51f18a1180be27c4ee0978aaa9e1295dbd4b
SHA512 db218213ee139583f69b00ea7e33986857cbc73f0e549f996e0dc3b0b34282c838f874a65c13fa7e21adfb8d876ca6cef9421a19171c214b1ea98b1a99f1bc74
SSDEEP 1536:IwYZ5gZyjech8y/nK/bobGPgeMWKQxljH3PBe/8YkfbM9Wzw1mE3SmJQENYmAzTa:YiZpyDz/WVPX/9CWz9xmJQMYmAzsX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime GlobalAddAtomA MoveFileExW CreateJobObjectW GetUserDefaultLCID WideCharToMultiByte LoadLibraryW LocalShrink GetLocaleInfoW FatalAppExitW GetFileAttributesA HeapCreate GetModuleFileNameW ReleaseSemaphore ReplaceFileA DeactivateActCtx InterlockedExchange GetStdHandle SetLastError CreateNamedPipeA BuildCommDCBW LoadLibraryA LocalAlloc GetFileType AddAtomW lstrcatW CancelTimerQueueTimer FreeEnvironmentStringsW VirtualProtect GetCurrentDirectoryA FileTimeToLocalFileTime CreateFileW SetStdHandle HeapAlloc GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetProcAddress GetModuleHandleW ExitProcess WriteFile EnterCriticalSection LeaveCriticalSection GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind IsProcessorFeaturePresent HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle WriteConsoleW

user32

LoadIconA GetClassLongW SetKeyboardState

Sharing