f0b1a553b9a95bccb6075cc3fdbf262b[.]exe

General

Target
f0b1a553b9a95bccb6075cc3fdbf262b.exe
Size 304KB
Sample240321-e78lkadb8s
SHA256 e42ca928595758b2b4356885ea5114ac68cedec292b9fb390c960dcf153e5fa1
MD5 f0b1a553b9a95bccb6075cc3fdbf262b
SHA1 1f10357a0c43fb1ae50f04e46b926b465155f582
SHA512 a989c3661557c009b9f625bdf5eb8eee6aa8b6c9bf1f6d64d26f66b2d9b92a43759b7ec756ad216ee39c8dab1fce901f3bd289d0fa4c4cd4152815904872a739
SSDEEP 3072:IfMRwY7/P4+t/7ZEX9nWB9twfj3iqV//WPNzstx01j4PnAG:Bj4tcLAZXw08jwJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0b1a553b9a95bccb6075cc3fdbf262b.exe

File Explorer

f0b1a553b9a95bccb6075cc3fdbf262b.exe

.exe 304KB

f0b1a553b9a95bccb6075cc3fdbf262b.exe

IMPHASH 6911fddb233fa8e4e7d5798f64fd8e58
SHA256 e42ca928595758b2b4356885ea5114ac68cedec292b9fb390c960dcf153e5fa1
MD5 f0b1a553b9a95bccb6075cc3fdbf262b
SHA1 1f10357a0c43fb1ae50f04e46b926b465155f582
SHA512 a989c3661557c009b9f625bdf5eb8eee6aa8b6c9bf1f6d64d26f66b2d9b92a43759b7ec756ad216ee39c8dab1fce901f3bd289d0fa4c4cd4152815904872a739
SSDEEP 3072:IfMRwY7/P4+t/7ZEX9nWB9twfj3iqV//WPNzstx01j4PnAG:Bj4tcLAZXw08jwJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14445

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA InterlockedDecrement QueryDosDeviceA GetTickCount FindNextVolumeMountPointA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA GlobalAlloc WideCharToMultiByte GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetSystemPowerStatus GetConsoleAliasExesLengthW GetVersionExW GetConsoleAliasW WriteConsoleW GetEnvironmentVariableA FindResourceA GetLastError GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress LoadLibraryA SetConsoleCtrlHandler GetNumberFormatW RemoveDirectoryW GetModuleFileNameA GetModuleHandleA VirtualProtect PeekConsoleInputA GetCurrentProcessId CloseHandle CreateFileW SetStdHandle OutputDebugStringW LoadLibraryExW ExitThread CreateFileA EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW HeapFree HeapAlloc IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW LCMapStringW GetProcessHeap ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize IsDebuggerPresent GetCurrentThreadId GetFileType ReadFile SetFilePointerEx QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage GetOEMCP HeapReAlloc

user32

CharLowerA GetAltTabInfoA SetUserObjectSecurity GetClassInfoA DrawFrameControl CharUpperBuffW

advapi32

ReadEventLogA

Sharing