0d16c73f31f81df2059621ce4e8a9330[.]exe

General

Target
0d16c73f31f81df2059621ce4e8a9330.exe
Size 308KB
Sample240320-red8gaab57
SHA256 bec5e37cf9e9ffc78bb82451a60fcde0b7dde3ff43bb9c5a9ae8761692ace613
MD5 0d16c73f31f81df2059621ce4e8a9330
SHA1 c8b48daa42731df6c0cb34c97150693295d93481
SHA512 fb316610b2530dd196f832f8f7823b5d42920f66eea86570a79e3fff19947c76395ada184edb41f830f89f1492f55311f15d2d286bd1685a0305d4dfb99d0dc3
SSDEEP 3072:2/kMT2Sujdp9S8+scKqEXsyqQdsLva9RCyWym+/aU8Gjej1Zs2bXPYn5:SiVS81XvRiyWym+58Wej1ZsE6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d16c73f31f81df2059621ce4e8a9330.exe

File Explorer

0d16c73f31f81df2059621ce4e8a9330.exe

.exe 308KB

0d16c73f31f81df2059621ce4e8a9330.exe

IMPHASH c7dc01e7bf458b5be41a3a73770771d1
SHA256 bec5e37cf9e9ffc78bb82451a60fcde0b7dde3ff43bb9c5a9ae8761692ace613
MD5 0d16c73f31f81df2059621ce4e8a9330
SHA1 c8b48daa42731df6c0cb34c97150693295d93481
SHA512 fb316610b2530dd196f832f8f7823b5d42920f66eea86570a79e3fff19947c76395ada184edb41f830f89f1492f55311f15d2d286bd1685a0305d4dfb99d0dc3
SSDEEP 3072:2/kMT2Sujdp9S8+scKqEXsyqQdsLva9RCyWym+/aU8Gjej1Zs2bXPYn5:SiVS81XvRiyWym+58Wej1ZsE6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16794

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement QueryDosDeviceA CreateDirectoryW GetFileAttributesExA GetModuleHandleW GetTickCount ReadConsoleW EnumTimeFormatsW GlobalAlloc WideCharToMultiByte GetVolumeInformationA GlobalFindAtomA LoadLibraryW TerminateThread GetLocaleInfoW GetSystemPowerStatus FreeConsole GetConsoleAliasExesLengthW WriteConsoleW GetModuleFileNameW GetLocaleInfoA GetLastError GetCurrentDirectoryW GetProcAddress LoadLibraryA GetNumberFormatW RemoveDirectoryW VirtualProtect PeekConsoleInputA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId ReadConsoleOutputCharacterW CloseHandle CreateFileW SetStdHandle OutputDebugStringW LoadLibraryExW CreateFileA FindResourceA FindNextVolumeMountPointW GetEnvironmentVariableW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW HeapFree HeapAlloc IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW LCMapStringW GetProcessHeap IsDebuggerPresent GetStdHandle GetFileType ExitProcess GetModuleHandleExW WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize GetCurrentThreadId ReadFile SetFilePointerEx GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage GetOEMCP HeapReAlloc

user32

GetClassInfoW CharLowerA SetUserObjectSecurity GetAltTabInfoW DrawFrameControl CharUpperBuffW

gdi32

CreateDCA

advapi32

ReadEventLogA

Sharing