qwcEjrHU5nu3zB9LKmGVuRne[.]exe

General

Target
qwcEjrHU5nu3zB9LKmGVuRne.exe
Size 822KB
Sample240404-kzkgnaba2s
SHA256 b84760ded0544c86d23849130082b99c3000b1e4ca5da0690fcdfbf2771b7993
MD5 f29bb9918f3803046c2bab24c20b458d
SHA1 c162f42333a6a7ef23ea9fc17e470daece374b6c
SHA512 e9f27f3be82a4b32ad155067b5e7c8652ec2031321eec64574152f2ddb01ff20dc9f44ee75ff7c363b103e3d8a7952c013416f360527e969963a11dea023a164
SSDEEP 24576:OYHymN8tZiUqGvCBSYcjOaTKsB5Oih4un0:OYRNyZiUqwCgYWHhn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
qwcEjrHU5nu3zB9LKmGVuRne.exe

File Explorer

qwcEjrHU5nu3zB9LKmGVuRne.exe

.exe 822KB

qwcEjrHU5nu3zB9LKmGVuRne.exe

IMPHASH eb67be19b81b44ee5931ef078192d536
SHA256 b84760ded0544c86d23849130082b99c3000b1e4ca5da0690fcdfbf2771b7993
MD5 f29bb9918f3803046c2bab24c20b458d
SHA1 c162f42333a6a7ef23ea9fc17e470daece374b6c
SHA512 e9f27f3be82a4b32ad155067b5e7c8652ec2031321eec64574152f2ddb01ff20dc9f44ee75ff7c363b103e3d8a7952c013416f360527e969963a11dea023a164
SSDEEP 24576:OYHymN8tZiUqGvCBSYcjOaTKsB5Oih4un0:OYRNyZiUqwCgYWHhn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GetDateFormatW CreateFileA GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA HeapAlloc InterlockedIncrement HeapFree CreateHardLinkA ConnectNamedPipe GetModuleHandleW FindNextVolumeMountPointA ReadConsoleOutputA GetUserDefaultLangID GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW lstrcpynW GetAtomNameW LocalHandle SetConsoleTitleA WritePrivateProfileStringW GetThreadLocale GetProcAddress GetLongPathNameA SetComputerNameA SetCalendarInfoW SetConsoleDisplayMode GlobalFindAtomW GetModuleFileNameA HeapSetInformation VirtualProtect GetCurrentDirectoryA DeleteCriticalSection FindAtomW GetSystemTime SetFileAttributesW CreateFileW EncodePointer DecodePointer ExitProcess GetCommandLineW GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection Sleep HeapSize InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapReAlloc SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers ReadFile CloseHandle

user32

GetMonitorInfoW CopyRect LoadIconA

Sharing