7b60671c[.]exe | Triage™

General

Target
7b60671c.exe
Size 313KB
Sample240331-ppdnksbh59
SHA256 b7ba148ee92911133697415435ef33d98829b0311a641e479b37e8a0468bad6c
MD5 849a173f9eeb87cb0675298e884e3e19
SHA1 059d4c20611f181f6d201898a21b74bbf2cd33f0
SHA512 ac60c500a7a75697db92ee6f9dc62c278ebc76e53608b424d0aa7b4eff79a4cd19f8dfa867654c79bd8f1c290704926be055bd3713a1e70ac213c3afc6140809
SSDEEP 3072:VLEfWCd21xkD+ywZXh2DZotrdHvyLJW/G5pwqgJdkNNlDH3oBlMT6a:VI3MzkDQLtZ8+G5pTgP80BCT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b60671c.exe

File Explorer

7b60671c.exe

.exe 313KB

7b60671c.exe

IMPHASH 9d27daa7ca2967551736bac5da1371f7
SHA256 b7ba148ee92911133697415435ef33d98829b0311a641e479b37e8a0468bad6c
MD5 849a173f9eeb87cb0675298e884e3e19
SHA1 059d4c20611f181f6d201898a21b74bbf2cd33f0
SHA512 ac60c500a7a75697db92ee6f9dc62c278ebc76e53608b424d0aa7b4eff79a4cd19f8dfa867654c79bd8f1c290704926be055bd3713a1e70ac213c3afc6140809
SSDEEP 3072:VLEfWCd21xkD+ywZXh2DZotrdHvyLJW/G5pwqgJdkNNlDH3oBlMT6a:VI3MzkDQLtZ8+G5pTgP80BCT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14450

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yenim77\cesarobi\sihezaz\geso43 huzesububivena6.pdb

kernel32

FindResourceW GetConsoleAliasA QueryDosDeviceA _lcreat MoveFileWithProgressA GetConsoleAliasesLengthA GetNumberFormatA ReadConsoleW GetConsoleCP GetVolumeInformationA GlobalFindAtomA SetCommConfig InitializeCriticalSectionAndSpinCount ReadConsoleInputA GetSystemPowerStatus FindNextVolumeW WriteConsoleW FileTimeToSystemTime GetLocaleInfoA GetTempPathW GetLastError ChangeTimerQueueTimer SetLastError GetProcAddress LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW RemoveDirectoryW VirtualLock GetModuleFileNameA GetCurrentDirectoryA GetWindowsDirectoryW GetStringTypeW OutputDebugStringW FlushFileBuffers CreateFileA GetNumaNodeProcessorMask ExitThread GetEnvironmentVariableW IsProcessorFeaturePresent EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte IsDebuggerPresent HeapSize HeapFree GetCurrentThreadId EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle HeapAlloc GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LCMapStringW GetConsoleMode SetFilePointerEx SetStdHandle CreateFileW

user32

CharUpperBuffA DrawCaption

gdi32

SetTextColor

advapi32

ReadEventLogW

Sharing