f2d1f4ec91d65ce95ad734b10664fd68[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
f2d1f4ec91d65ce95ad734b10664fd68.exe
Size 316KB
Sample240321-ya81lsaa4y
SHA256 7e58fdd635ef291b98c8c9e6c317fc4f6699dfb8580d95159fdb8f39e9ba9ea6
MD5 f2d1f4ec91d65ce95ad734b10664fd68
SHA1 6a591a37f17176253e935bcf8579ef76cd33bb7b
SHA512 61908553faf34027b425fdba0d124f4cbff64b1da1bd38d35442832862732f9aced06ae238228c9354b47754e793ca96d9c028f8fe3fa3981682bd64365debea
SSDEEP 3072:X40QDLSbEWxyl+ccK+EXqLIUJ0qDia75STUMA6i7b241oj76d:UkclZq7JbDiJQ5i
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2d1f4ec91d65ce95ad734b10664fd68.exe

File Explorer

f2d1f4ec91d65ce95ad734b10664fd68.exe

.exe 316KB

f2d1f4ec91d65ce95ad734b10664fd68.exe

IMPHASH 22d51019ef926c7d67891a16d936728c
SHA256 7e58fdd635ef291b98c8c9e6c317fc4f6699dfb8580d95159fdb8f39e9ba9ea6
MD5 f2d1f4ec91d65ce95ad734b10664fd68
SHA1 6a591a37f17176253e935bcf8579ef76cd33bb7b
SHA512 61908553faf34027b425fdba0d124f4cbff64b1da1bd38d35442832862732f9aced06ae238228c9354b47754e793ca96d9c028f8fe3fa3981682bd64365debea
SSDEEP 3072:X40QDLSbEWxyl+ccK+EXqLIUJ0qDia75STUMA6i7b241oj76d:UkclZq7JbDiJQ5i
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleA GetConsoleAliasA CreateDirectoryW GetFileAttributesExA GetModuleHandleW GetTickCount EnumTimeFormatsW GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetSystemPowerStatus FreeConsole GetConsoleAliasExesLengthW WriteConsoleW CreateFileW MultiByteToWideChar FindNextVolumeMountPointW GetLastError GetProcAddress InterlockedIncrement GetExitCodeThread GetNumberFormatW RemoveDirectoryW QueryDosDeviceW GetModuleFileNameA VirtualProtect GetCurrentDirectoryA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId ReadConsoleOutputCharacterW CloseHandle SetStdHandle OutputDebugStringW LoadLibraryExW HeapReAlloc FindResourceA GetLocaleInfoA PeekConsoleInputW GetEnvironmentVariableW GetOEMCP IsValidCodePage EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte GetStringTypeW HeapFree HeapAlloc IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW LCMapStringW GetProcessHeap IsDebuggerPresent GetStdHandle GetFileType ExitProcess GetModuleHandleExW WriteFile GetModuleFileNameW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize GetCurrentThreadId ReadFile SetFilePointerEx QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP

user32

GetKeyboardLayoutNameA CharUpperBuffW DrawEdge GetClassInfoW CharLowerA SetUserObjectSecurity GetAltTabInfoW

gdi32

CreateDCA

advapi32

ReadEventLogA

winhttp

WinHttpOpen