0f8e95a2c0575292fe6b8151428013f85b645f315e2d67a927a4b0c6d26af3c9[.]exe

General

Target
0f8e95a2c0575292fe6b8151428013f85b645f315e2d67a927a4b0c6d26af3c9.exe
Size 2.9MB
Sample240406-behynagb2t
SHA256 0f8e95a2c0575292fe6b8151428013f85b645f315e2d67a927a4b0c6d26af3c9
MD5 2ab36b7875f2b5a876377164b3b609f2
SHA1 0d022cf7d49015fc97c576d89a710e5aeabaeaff
SHA512 e62f221b3e3a7d2d14e56519ca46e69af3c2570d8d2d9cc382c9778fe37a75567b3af311074ed1709a0385d9bd38e11dd2ed8dbd1b30427b53d56266fe486238
SSDEEP 49152:ueG4DbBlHFAYl0R2fvjnZ1tmr5BOFGdoYNStv4Qr/0O0NAfT6ZI5I7+SPqKSM1x4:ueGUGAfT1e+hKhDPa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f8e95a2c0575292fe6b8151428013f85b645f315e2d67a927a4b0c6d26af3c9.exe

File Explorer

0f8e95a2c0575292fe6b8151428013f85b645f315e2d67a927a4b0c6d26af3c9.exe

.exe 2.9MB

0f8e95a2c0575292fe6b8151428013f85b645f315e2d67a927a4b0c6d26af3c9.exe

IMPHASH 01e6d38c489b0f7592280e79fa04d034
SHA256 0f8e95a2c0575292fe6b8151428013f85b645f315e2d67a927a4b0c6d26af3c9
MD5 2ab36b7875f2b5a876377164b3b609f2
SHA1 0d022cf7d49015fc97c576d89a710e5aeabaeaff
SHA512 e62f221b3e3a7d2d14e56519ca46e69af3c2570d8d2d9cc382c9778fe37a75567b3af311074ed1709a0385d9bd38e11dd2ed8dbd1b30427b53d56266fe486238
SSDEEP 49152:ueG4DbBlHFAYl0R2fvjnZ1tmr5BOFGdoYNStv4Qr/0O0NAfT6ZI5I7+SPqKSM1x4:ueGUGAfT1e+hKhDPa
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

805151

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\work\aceview\bin\Win32\Release\pdb\AceLoader.pdb

kernel32

GlobalFree HeapAlloc LocalFree GetProcessHeap GetACP MultiByteToWideChar WideCharToMultiByte GetFileSize CreateDirectoryW GetFullPathNameW RemoveDirectoryW SetFileAttributesW GetCurrentDirectoryW MoveFileExW GetTempFileNameW MoveFileW LockResource LoadResource FindResourceW GlobalAlloc GetCurrentProcess FormatMessageW GetStdHandle GetEnvironmentVariableW GetFileType GetExitCodeProcess CreateProcessW GetPrivateProfileStringW LoadLibraryExW SystemTimeToFileTime GetTickCount LocalAlloc SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileInformationByHandle GetCurrentThreadId HeapFree GetFileAttributesExW CreateFileW FindClose FindNextFileW lstrcmpiW OpenProcess FindFirstFileW FreeLibrary LoadLibraryW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetVersionExW GetFileSizeEx DeleteFileW SetEndOfFile SetFilePointer WriteFile ReadFile lstrcatW lstrlenW CloseHandle Sleep ReleaseMutex WaitForSingleObject CreateMutexW GetDriveTypeW GetModuleHandleW GetProcAddress LoadLibraryA GetFileAttributesW GetModuleFileNameW ExpandEnvironmentStringsW DeleteCriticalSection DecodePointer GetLastError InitializeCriticalSectionEx FileTimeToSystemTime GetSystemDefaultLCID ConvertFiberToThread ReadConsoleA SetConsoleMode DeleteFiber WriteConsoleW GetConsoleOutputCP FlushFileBuffers ReadConsoleW IsBadStringPtrW GetConsoleMode SetFilePointerEx SetStdHandle FreeEnvironmentStringsW SetErrorMode GetLocaleInfoEx EncodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo GetSystemTimeAsFileTime GetTimeZoneInformation InitializeCriticalSectionAndSpinCount SetEnvironmentVariableW IsDebuggerPresent OutputDebugStringW RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId RtlUnwind InterlockedPushEntrySList SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW SetConsoleCtrlHandler GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc HeapSize FindFirstFileExW IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW

user32

EnumWindows GetProcessWindowStation GetUserObjectInformationW MessageBoxW GetActiveWindow GetClassNameW SendMessageTimeoutW

Sharing