b01f53b153d64b48a3e555b4ed7a5274[.]exe

General

Target
b01f53b153d64b48a3e555b4ed7a5274.exe
Size 200KB
Sample240310-sgp87afa66
SHA256 9648391b4b4a1db893e6939901524170ee2a6a0f1744dcc6e770da2be55f191a
MD5 b01f53b153d64b48a3e555b4ed7a5274
SHA1 cce313caf427dd96ca5993fd83045ed57c782e54
SHA512 0b9fa8c2f24cf4f6a200302cd1aa7f584964a4cf0f145c306820ef8f522e8270def01f3fee771038a374c817bbb6d2aedb6adbc2543d3595a08fc251b4e71170
SSDEEP 3072:LBv3GsI59M50Xf9XVCHZnBab8//+3NY0SIoM0mg:LBv3G35O50Xf9kHFwIYvWm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b01f53b153d64b48a3e555b4ed7a5274.exe

File Explorer

b01f53b153d64b48a3e555b4ed7a5274.exe

.exe 200KB

b01f53b153d64b48a3e555b4ed7a5274.exe

IMPHASH ac2ae63bc0c9af73d4bd0b2f5d2036a5
SHA256 9648391b4b4a1db893e6939901524170ee2a6a0f1744dcc6e770da2be55f191a
MD5 b01f53b153d64b48a3e555b4ed7a5274
SHA1 cce313caf427dd96ca5993fd83045ed57c782e54
SHA512 0b9fa8c2f24cf4f6a200302cd1aa7f584964a4cf0f145c306820ef8f522e8270def01f3fee771038a374c817bbb6d2aedb6adbc2543d3595a08fc251b4e71170
SSDEEP 3072:LBv3GsI59M50Xf9XVCHZnBab8//+3NY0SIoM0mg:LBv3G35O50Xf9kHFwIYvWm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA HeapAlloc ZombifyActCtx CreateHardLinkA GetDateFormatA WideCharToMultiByte LoadLibraryW GetFileAttributesW GetModuleFileNameW CompareStringW CreateJobObjectA InterlockedExchange SetThreadLocale GetLastError GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode GetNumaHighestNodeNumber GetAtomNameA UnhandledExceptionFilter LocalAlloc DnsHostnameToComputerNameA WritePrivateProfileStringA AddAtomW FindAtomA CreatePipe BuildCommDCBA VirtualProtect GetCurrentDirectoryA ReleaseMutex FileTimeToLocalFileTime HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer HeapCreate HeapFree GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize IsProcessorFeaturePresent LCMapStringW MultiByteToWideChar GetStringTypeW RaiseException

user32

CopyRect LoadIconW

Sharing