6652cf1732b2465b27fc50e4f8d6bd48[.]exe

General

Target
6652cf1732b2465b27fc50e4f8d6bd48.exe
Size 497KB
Sample240411-eshftsca27
SHA256 10717b3839fd94baeb7cf9e7001163f937f47063efced522ee64c41a98fe3b7d
MD5 6652cf1732b2465b27fc50e4f8d6bd48
SHA1 7cce4d37d564a9f655b7825f5e676af0a1407e4e
SHA512 40b4e137834d963d6fb831834a433a7604d37be7df87f74d48bf13d56b1f2453ae2ab9111830f3291288bd6f71c928e0ed9b34cde89aca57365c8dc588775c4d
SSDEEP 6144:1q2W5uAz/87TeKLTAtpNPReN9fQ3OrNT0ouMpCivua3aFGI11P2FCLbf:xuuAL87/LTciN9tF64Koc/Pf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6652cf1732b2465b27fc50e4f8d6bd48.exe

File Explorer

6652cf1732b2465b27fc50e4f8d6bd48.exe

.exe 497KB

6652cf1732b2465b27fc50e4f8d6bd48.exe

IMPHASH 4ce0689693455405a07d4dca1b3e51ef
SHA256 10717b3839fd94baeb7cf9e7001163f937f47063efced522ee64c41a98fe3b7d
MD5 6652cf1732b2465b27fc50e4f8d6bd48
SHA1 7cce4d37d564a9f655b7825f5e676af0a1407e4e
SHA512 40b4e137834d963d6fb831834a433a7604d37be7df87f74d48bf13d56b1f2453ae2ab9111830f3291288bd6f71c928e0ed9b34cde89aca57365c8dc588775c4d
SSDEEP 6144:1q2W5uAz/87TeKLTAtpNPReN9fQ3OrNT0ouMpCivua3aFGI11P2FCLbf:xuuAL87/LTciN9tF64Koc/Pf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8010

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapReAlloc EnumCalendarInfoA TryEnterCriticalSection GetConsoleAliasExesLengthA SetDefaultCommConfigW HeapFree GetComputerNameW UnlockFile GetModuleHandleW VirtualFree FindNextVolumeMountPointA GetConsoleAliasesLengthA GetDateFormatA SetCommState GetConsoleCP GlobalAlloc LoadLibraryW GetLocaleInfoW IsBadWritePtr GetAtomNameW SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW GetProcAddress FindVolumeMountPointClose GetProcessHeaps LoadLibraryA CreatePipe GetModuleFileNameA SetConsoleTitleW FreeEnvironmentStringsW SetCalendarInfoA CloseHandle CreateFileW HeapAlloc GetLastError GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind HeapSize SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW FlushFileBuffers

user32

LoadIconW

ole32

CoTaskMemFree

Sharing