1fb40e73578701cc0fa99a9e1fd840d4[.]exe

General

Target
1fb40e73578701cc0fa99a9e1fd840d4.exe
Size 261KB
Sample240426-kbvbyscf88
SHA256 a637cb5b10bcdf7d7f77c408b3e81af8f006f9e506c5fd47ef28cea8d8f7f1d3
MD5 1fb40e73578701cc0fa99a9e1fd840d4
SHA1 58aaee87a639eaff32999cfe02e34063edf9b0fb
SHA512 16e410e3459d6f97f72949a9a58c53ba7b10633e02ad7ff13e9832c5fb882a0f70f627edcb8c33b8e129f4aa40caecd23fea8e268e161820d6b4d4455f84f6db
SSDEEP 3072:2H+3UrXqpkR7m+PvVrAGvVWbTncnMwjAwn+k/qTEW+CKbzXOXmSIN8niYhr:HT+9mzncMOAC/qT3dgzjh8nTr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fb40e73578701cc0fa99a9e1fd840d4.exe

File Explorer

1fb40e73578701cc0fa99a9e1fd840d4.exe

.exe 261KB

1fb40e73578701cc0fa99a9e1fd840d4.exe

IMPHASH fee2e01e9ecb27c28da2b6fc37f265e9
SHA256 a637cb5b10bcdf7d7f77c408b3e81af8f006f9e506c5fd47ef28cea8d8f7f1d3
MD5 1fb40e73578701cc0fa99a9e1fd840d4
SHA1 58aaee87a639eaff32999cfe02e34063edf9b0fb
SHA512 16e410e3459d6f97f72949a9a58c53ba7b10633e02ad7ff13e9832c5fb882a0f70f627edcb8c33b8e129f4aa40caecd23fea8e268e161820d6b4d4455f84f6db
SSDEEP 3072:2H+3UrXqpkR7m+PvVrAGvVWbTncnMwjAwn+k/qTEW+CKbzXOXmSIN8niYhr:HT+9mzncMOAC/qT3dgzjh8nTr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17495

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xivul-xoveyu.pdb

kernel32

GlobalMemoryStatus GetLocaleInfoA LocalCompact InterlockedDecrement GetComputerNameW CreateHardLinkA GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID SetCommState GlobalAlloc LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA BuildCommDCBW LoadLibraryA SetCalendarInfoW GetExitCodeThread AddAtomW CreateEventW GlobalFindAtomW GetOEMCP LoadLibraryExA VirtualProtect GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent IsValidCodePage GetACP GetCPInfo GetCurrentThreadId HeapFree ExitProcess GetModuleHandleExW WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW LoadLibraryExW OutputDebugStringW LCMapStringW SetStdHandle SetFilePointerEx HeapReAlloc CreateFileW

Sharing