b0f1d6defb63ca51dce41219e35f97ab8d89ec19c863f5b659fb8b05c1c92248[.]exe

Target
b0f1d6defb63ca51dce41219e35f97ab8d89ec19c863f5b659fb8b05c1c92248.exe
Size 308KB
Sample240324-danz8agh24
SHA256 b0f1d6defb63ca51dce41219e35f97ab8d89ec19c863f5b659fb8b05c1c92248
MD5 60f468fb140a2497c65273bbaccb51f7
SHA1 fd5ce406c85ec123c40eef3969cb44f32997159f
SHA512 38bdf0d78d0c90f7e1ee7e0b0d0e455b0b004a3e9c0dc8ba7f11a3902d8652829e870b6a70215df6bec410308e0ffca84a1f6aa6ec9674db365200fbd19a059e
SSDEEP 3072:FGmUR5WgfI91+oYYCEXXhRwtnm4r/xHyhnpIGrI5KSWA612UIK:ZURzw1zRDwtnfrsRHrcU/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0f1d6defb63ca51dce41219e35f97ab8d89ec19c863f5b659fb8b05c1c92248.exe

File Explorer

b0f1d6defb63ca51dce41219e35f97ab8d89ec19c863f5b659fb8b05c1c92248.exe

.exe 308KB

b0f1d6defb63ca51dce41219e35f97ab8d89ec19c863f5b659fb8b05c1c92248.exe

IMPHASH 3a70316d41fb098a9176638cafb09b63
SHA256 b0f1d6defb63ca51dce41219e35f97ab8d89ec19c863f5b659fb8b05c1c92248
MD5 60f468fb140a2497c65273bbaccb51f7
SHA1 fd5ce406c85ec123c40eef3969cb44f32997159f
SHA512 38bdf0d78d0c90f7e1ee7e0b0d0e455b0b004a3e9c0dc8ba7f11a3902d8652829e870b6a70215df6bec410308e0ffca84a1f6aa6ec9674db365200fbd19a059e
SSDEEP 3072:FGmUR5WgfI91+oYYCEXXhRwtnm4r/xHyhnpIGrI5KSWA612UIK:ZURzw1zRDwtnfrsRHrcU/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA SetConsoleTextAttribute InterlockedDecrement GetModuleHandleW GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GlobalAlloc WideCharToMultiByte GetVolumeInformationA GetVersionExW GetConsoleAliasW WriteConsoleW SetSystemPowerState CreateFileW GetEnvironmentVariableA ExitThread GetLastError GetLocaleInfoA GetProcAddress RemoveDirectoryA LoadLibraryA FindFirstVolumeMountPointW GetNumberFormatW QueryDosDeviceW GlobalFindAtomW GetModuleFileNameA VirtualProtect GetCurrentDirectoryA PeekConsoleInputA GetCurrentProcessId CloseHandle SetStdHandle OutputDebugStringW LoadLibraryExW HeapReAlloc ReadConsoleOutputCharacterA FindResourceA EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent HeapFree HeapAlloc GetCommandLineA RaiseException RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW LCMapStringW ExitProcess GetModuleHandleExW IsDebuggerPresent GetStdHandle GetFileType GetProcessHeap WriteFile GetModuleFileNameW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize GetCurrentThreadId ReadFile SetFilePointerEx QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage GetOEMCP

user32

GetUserObjectSecurity CharLowerA GetAltTabInfoA GetClassInfoA DrawFrameControl CharUpperBuffW

advapi32

ReadEventLogW

Resubmissions

Sharing

General