3da04dd1b6495f2b933344d768179d32[.]exe

General

Target
3da04dd1b6495f2b933344d768179d32.exe
Size 415KB
Sample240422-tf7mhsdc71
SHA256 165c16df4dfeccd94efab42dad5ab311036d2938abda3a04e4ff7ed027ed8946
MD5 3da04dd1b6495f2b933344d768179d32
SHA1 b6f4c41d128d99f55a9e99fc452cb363676afa0c
SHA512 e684656af741f2a934c01cd6f409dd29fd4cea7405eb0ce7a98df7308f86a16bd908edaea8b55fe2630ca9ad9ec145c5ead50ee23896a34e11dd8e1034362155
SSDEEP 6144:+aNl9hsfxn6bIHo2ve4QrU2O/84Odz0f2kZ401ic9BJ/K:+aNXhKxwII2veXEIUBZD1BK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da04dd1b6495f2b933344d768179d32.exe

File Explorer

3da04dd1b6495f2b933344d768179d32.exe

.exe 415KB

3da04dd1b6495f2b933344d768179d32.exe

IMPHASH 12f7de8a3c68b276aca25710ff68730e
SHA256 165c16df4dfeccd94efab42dad5ab311036d2938abda3a04e4ff7ed027ed8946
MD5 3da04dd1b6495f2b933344d768179d32
SHA1 b6f4c41d128d99f55a9e99fc452cb363676afa0c
SHA512 e684656af741f2a934c01cd6f409dd29fd4cea7405eb0ce7a98df7308f86a16bd908edaea8b55fe2630ca9ad9ec145c5ead50ee23896a34e11dd8e1034362155
SSDEEP 6144:+aNl9hsfxn6bIHo2ve4QrU2O/84Odz0f2kZ401ic9BJ/K:+aNXhKxwII2veXEIUBZD1BK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFirmwareEnvironmentVariableA GetComputerNameW UnlockFile GetModuleHandleW GetConsoleAliasesLengthA GetDateFormatA SetCommState GlobalAlloc LoadLibraryW IsValidLocale GetConsoleAliasExesLengthW HeapCreate FindNextVolumeW IsBadWritePtr GlobalUnfix GetProcAddress GetLocaleInfoA SetFileAttributesA LoadLibraryA SetCalendarInfoW GetFileType SetConsoleDisplayMode SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW GetVolumeInformationW LocalFileTimeToFileTime GetProcessHeaps EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

ReadEventLogA

Sharing