b59b49633661c5dd6921da1c65dfa862[.]exe

General

Target
b59b49633661c5dd6921da1c65dfa862.exe
Size 490KB
Sample240412-js811agh73
SHA256 0dc9afa5a875c051c3dacf9be22239a41bda5c2eb39fb5e69b1e7059e542fe53
MD5 b59b49633661c5dd6921da1c65dfa862
SHA1 dcab35c0dd14195e4c205d42d2d0e888b3a66c73
SHA512 fa6b91e6bf89de618da1dc38a3bb6866b6457ec1d908bfca822cee0dcb4ed9ec5bf91a1a529d9dde85b81521a2e02b5261a591f938e3cb69b9479abc20f8ebf3
SSDEEP 6144:DyQs5pHvN1W10cBdjRusnpfBOL22g0rza6whsRwrmXFaMHw/ru5yonu:1ypHvbIdjBfECH0k1rmXMbUvu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59b49633661c5dd6921da1c65dfa862.exe

File Explorer

b59b49633661c5dd6921da1c65dfa862.exe

.exe 490KB

b59b49633661c5dd6921da1c65dfa862.exe

IMPHASH e03af4c47837fbfefcd192e4bab71da3
SHA256 0dc9afa5a875c051c3dacf9be22239a41bda5c2eb39fb5e69b1e7059e542fe53
MD5 b59b49633661c5dd6921da1c65dfa862
SHA1 dcab35c0dd14195e4c205d42d2d0e888b3a66c73
SHA512 fa6b91e6bf89de618da1dc38a3bb6866b6457ec1d908bfca822cee0dcb4ed9ec5bf91a1a529d9dde85b81521a2e02b5261a591f938e3cb69b9479abc20f8ebf3
SSDEEP 6144:DyQs5pHvN1W10cBdjRusnpfBOL22g0rza6whsRwrmXFaMHw/ru5yonu:1ypHvbIdjBfECH0k1rmXMbUvu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA HeapReAlloc EnumCalendarInfoA TryEnterCriticalSection VirtualQuery GetConsoleAliasExesLengthA SetDefaultCommConfigW HeapFree UnlockFile FreeEnvironmentStringsA GetModuleHandleW FindNextVolumeMountPointA GetConsoleAliasesLengthA GetDateFormatA SetCommState GetConsoleCP GlobalAlloc LoadLibraryW GetLocaleInfoW IsBadWritePtr GetAtomNameW GetModuleFileNameW SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW GetProcAddress FindVolumeMountPointClose GetProcessHeaps LoadLibraryA CreatePipe SetConsoleTitleW SetCalendarInfoA CloseHandle CreateFileW GetLastError GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer HeapAlloc IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind HeapSize SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW FlushFileBuffers

user32

LoadIconW

ole32

CoTaskMemFree

Sharing