f44d23b0b845ca4388424f9d5be32890[.]exe

General

Target
f44d23b0b845ca4388424f9d5be32890.exe
Size 283KB
Sample240311-g6l3aaec21
SHA256 067950a7b80f52fc946a13bf4fd389ea8cbbc043658d33aaff9e3680e1dadd46
MD5 f44d23b0b845ca4388424f9d5be32890
SHA1 d46eac4684455e34a396eba79ddb01441359ebb6
SHA512 a8943cc756b9c3339efb3fe8e24e0c24f4e285012a731b4e8e2f5e940a37d246879d469e1ee9825805670fd63f905cec91b1dcde6d01ee0aea72fe7abe711ede
SSDEEP 3072:c+tpp4K1PAppyBA1Q8EkKXU1iKL4i2Dva2ICXIIKcKU1KpVT/wV9tmX3m:cud14pEWC5/Hi2KCY5mUpVTEy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f44d23b0b845ca4388424f9d5be32890.exe

File Explorer

f44d23b0b845ca4388424f9d5be32890.exe

.exe 283KB

f44d23b0b845ca4388424f9d5be32890.exe

IMPHASH d56890d53749dde8bc65c65be68b457c
SHA256 067950a7b80f52fc946a13bf4fd389ea8cbbc043658d33aaff9e3680e1dadd46
MD5 f44d23b0b845ca4388424f9d5be32890
SHA1 d46eac4684455e34a396eba79ddb01441359ebb6
SHA512 a8943cc756b9c3339efb3fe8e24e0c24f4e285012a731b4e8e2f5e940a37d246879d469e1ee9825805670fd63f905cec91b1dcde6d01ee0aea72fe7abe711ede
SSDEEP 3072:c+tpp4K1PAppyBA1Q8EkKXU1iKL4i2Dva2ICXIIKcKU1KpVT/wV9tmX3m:cud14pEWC5/Hi2KCY5mUpVTEy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

39920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAlloc GetCurrentProcessId GetExitCodeThread GetLastError DuplicateHandle GetTickCount OpenMutexA LoadLibraryA LoadLibraryW GetModuleFileNameW SetEnvironmentVariableW FindResourceA GlobalFindAtomA GetWindowsDirectoryW GetCurrentDirectoryA CreateDirectoryW RemoveDirectoryW CreateFileW GetProcAddress GetVolumeInformationW GetVersionExA FindNextVolumeMountPointW GetLocaleInfoA GetLocaleInfoW GetNumberFormatA EnumTimeFormatsA ReadConsoleInputW AttachConsole ReadConsoleW WriteConsoleA AddConsoleAliasW GetConsoleAliasesLengthW GetConsoleAliasExesLengthA SetEndOfFile CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetFileAttributesExA GetStringTypeW OutputDebugStringW EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapAlloc HeapFree HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW HeapReAlloc ReadFile

user32

CharUpperBuffW GetClassInfoA LoadKeyboardLayoutW CharLowerBuffA

gdi32

SetStretchBltMode

shell32

FindExecutableA

Sharing