b94bd24023b0df0089295b2246546a256d3e82424ecdb[.]exe

General

Target
b94bd24023b0df0089295b2246546a256d3e82424ecdb.exe
Size 328KB
Sample240423-jjnnpsef4s
SHA256 b94bd24023b0df0089295b2246546a256d3e82424ecdb0c596b3500525aa4de0
MD5 65a31455a497caee44c5aa749c50e40b
SHA1 be39d07704efb35bd1503b3914c6dd6c9e6312e8
SHA512 8fc8d9308fede1f2d6b118b6071ce6ed4f86a7cb2442c4c9a9686b772a83961eda93c81c2c524396688dd1d7b2540d571811ac13cd38fbb72ccd7f6dd06220f9
SSDEEP 3072:jjGck+pUZ09BgybSnG+UF5XW1SNYtfvw5ZUDBLL7NVn8yjn5V4d2umdcZyH1IgSw:5k+Zt8PtgSF9VnJrPLdcZGh6hECc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b94bd24023b0df0089295b2246546a256d3e82424ecdb.exe

File Explorer

b94bd24023b0df0089295b2246546a256d3e82424ecdb.exe

.exe 328KB

b94bd24023b0df0089295b2246546a256d3e82424ecdb.exe

IMPHASH c9619f19f41ef1b7d232f47cfbcc330b
SHA256 b94bd24023b0df0089295b2246546a256d3e82424ecdb0c596b3500525aa4de0
MD5 65a31455a497caee44c5aa749c50e40b
SHA1 be39d07704efb35bd1503b3914c6dd6c9e6312e8
SHA512 8fc8d9308fede1f2d6b118b6071ce6ed4f86a7cb2442c4c9a9686b772a83961eda93c81c2c524396688dd1d7b2540d571811ac13cd38fbb72ccd7f6dd06220f9
SSDEEP 3072:jjGck+pUZ09BgybSnG+UF5XW1SNYtfvw5ZUDBLL7NVn8yjn5V4d2umdcZyH1IgSw:5k+Zt8PtgSF9VnJrPLdcZGh6hECc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14661

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xinosa dulicados52\vogewaxupi\gixugajipak20\n.pdb

kernel32

LocalCompact GetUserDefaultLCID AddConsoleAliasW CreateHardLinkA GetTickCount EnumTimeFormatsW GetUserDefaultLangID FindResourceExA GetVolumeInformationA GetLocaleInfoW GetCompressedFileSizeA MultiByteToWideChar GetTempPathW SetThreadLocale ChangeTimerQueueTimer SetLastError GetProcAddress FindFirstChangeNotificationW BuildCommDCBW LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW GetExitCodeThread RemoveDirectoryW AddAtomA SetNamedPipeHandleState GlobalFindAtomW GetModuleFileNameA GetOEMCP GlobalUnWire LoadLibraryExA ReadConsoleInputW GetWindowsDirectoryW AddConsoleAliasA SetFileAttributesA GetComputerNameA WriteConsoleW GetStringTypeW GetLastError HeapFree EncodePointer DecodePointer ExitProcess GetModuleHandleExW WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapAlloc GetProcessHeap HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW CreateFileW

advapi32

DeregisterEventSource

winhttp

WinHttpConnect

Sharing