f1dd2c73ae8ae93e7c7046a9d3ef2845[.]exe

General

Target
f1dd2c73ae8ae93e7c7046a9d3ef2845.exe
Size 371KB
Sample240322-jfvmvaaa66
SHA256 00efc6f7f740e5423da1a6817a21f5cdcfaa6366e57413cc55dc255f81962d82
MD5 f1dd2c73ae8ae93e7c7046a9d3ef2845
SHA1 1376c1ae93c9b69789b5744610fc25878362a4db
SHA512 7dfd0bc3e83f80819014b63b8c9e10e1726a6eb31179842b12658ec8fbb464143c49279a065c579b7944a77fcfe897486e83812b3bbf93aa71d2e4e662ef0b57
SSDEEP 3072:Ogpubbw1Tk/+BYYmEXf997X7deuDvFp+l3edTq0KjbMIFhbhf//kMutW7yIb2S/a:fCT/mt1tXZhvbqedG0KHxDbpiOdbBUJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1dd2c73ae8ae93e7c7046a9d3ef2845.exe

File Explorer

f1dd2c73ae8ae93e7c7046a9d3ef2845.exe

.exe 371KB

f1dd2c73ae8ae93e7c7046a9d3ef2845.exe

IMPHASH 1d363a16825484f3b256f5ef2aeceb2c
SHA256 00efc6f7f740e5423da1a6817a21f5cdcfaa6366e57413cc55dc255f81962d82
MD5 f1dd2c73ae8ae93e7c7046a9d3ef2845
SHA1 1376c1ae93c9b69789b5744610fc25878362a4db
SHA512 7dfd0bc3e83f80819014b63b8c9e10e1726a6eb31179842b12658ec8fbb464143c49279a065c579b7944a77fcfe897486e83812b3bbf93aa71d2e4e662ef0b57
SSDEEP 3072:Ogpubbw1Tk/+BYYmEXf997X7deuDvFp+l3edTq0KjbMIFhbhf//kMutW7yIb2S/a:fCT/mt1tXZhvbqedG0KHxDbpiOdbBUJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14584

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA InterlockedDecrement GetTickCount FindNextVolumeMountPointA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA GlobalAlloc WideCharToMultiByte GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetSystemPowerStatus GetVersionExW GetConsoleAliasW WriteConsoleW CreateFileW GetEnvironmentVariableA ExitThread GetLocaleInfoA GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress LoadLibraryA SetConsoleCtrlHandler GetNumberFormatW RemoveDirectoryW QueryDosDeviceW GetModuleFileNameA GetModuleHandleA VirtualProtect PeekConsoleInputA GetCurrentProcessId CloseHandle SetStdHandle OutputDebugStringW LoadLibraryExW HeapReAlloc GetLastError FindResourceA EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW HeapFree HeapAlloc GetCommandLineA RaiseException RtlUnwind GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW LCMapStringW IsDebuggerPresent GetStdHandle GetFileType GetProcessHeap ExitProcess GetModuleHandleExW WriteFile GetModuleFileNameW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize GetCurrentThreadId ReadFile SetFilePointerEx QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage GetOEMCP

user32

GetUserObjectSecurity CharLowerA GetAltTabInfoA GetClassInfoA DrawFrameControl CharUpperBuffW

advapi32

ReadEventLogW

Sharing