e5b8601b3855fd1ed6d5323f65adf406[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
e5b8601b3855fd1ed6d5323f65adf406.exe
Size 315KB
Sample240320-mkc55see78
SHA256 45ab730f19b743bca12db47745e8cd2254df1914432acb2b3b0a079c930afee3
MD5 e5b8601b3855fd1ed6d5323f65adf406
SHA1 eb3fc6d10b7a74b8f5367d3e7af7e7f2c8171010
SHA512 2f7346826f81aafaa89b4b669b0264981bb20a485c6065d1b7b9e42b5580bb234e22fac4a960eed422849b3e39c2e5abbb2d802c0b072efdff756d884281a77c
SSDEEP 3072:v0ENjSS+ER4ib+scKaEXw+U9KrRNlipuMUYhNLYx1o/ljqhTz6d:pGcblwmrRNlzYhlYxiQhT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5b8601b3855fd1ed6d5323f65adf406.exe

File Explorer

e5b8601b3855fd1ed6d5323f65adf406.exe

.exe 315KB

e5b8601b3855fd1ed6d5323f65adf406.exe

IMPHASH 22d51019ef926c7d67891a16d936728c
SHA256 45ab730f19b743bca12db47745e8cd2254df1914432acb2b3b0a079c930afee3
MD5 e5b8601b3855fd1ed6d5323f65adf406
SHA1 eb3fc6d10b7a74b8f5367d3e7af7e7f2c8171010
SHA512 2f7346826f81aafaa89b4b669b0264981bb20a485c6065d1b7b9e42b5580bb234e22fac4a960eed422849b3e39c2e5abbb2d802c0b072efdff756d884281a77c
SSDEEP 3072:v0ENjSS+ER4ib+scKaEXw+U9KrRNlipuMUYhNLYx1o/ljqhTz6d:pGcblwmrRNlzYhlYxiQhT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleA GetConsoleAliasA CreateDirectoryW GetFileAttributesExA GetModuleHandleW GetTickCount EnumTimeFormatsW GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetSystemPowerStatus FreeConsole GetConsoleAliasExesLengthW WriteConsoleW CreateFileW MultiByteToWideChar FindNextVolumeMountPointW GetLastError GetProcAddress InterlockedIncrement GetExitCodeThread GetNumberFormatW RemoveDirectoryW QueryDosDeviceW GetModuleFileNameA VirtualProtect GetCurrentDirectoryA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId ReadConsoleOutputCharacterW CloseHandle SetStdHandle OutputDebugStringW LoadLibraryExW HeapReAlloc FindResourceA GetLocaleInfoA PeekConsoleInputW GetEnvironmentVariableW GetOEMCP IsValidCodePage EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte GetStringTypeW HeapFree HeapAlloc IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW LCMapStringW GetProcessHeap IsDebuggerPresent GetStdHandle GetFileType ExitProcess GetModuleHandleExW WriteFile GetModuleFileNameW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize GetCurrentThreadId ReadFile SetFilePointerEx QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP

user32

GetKeyboardLayoutNameA CharUpperBuffW DrawEdge GetClassInfoW CharLowerA SetUserObjectSecurity GetAltTabInfoW

gdi32

CreateDCA

advapi32

ReadEventLogA

winhttp

WinHttpOpen