345050de5e24fcf643d92c82ed0b6f240e1b0fc034782b8e3df14fe7556155e3[.]exe

General

Target
345050de5e24fcf643d92c82ed0b6f240e1b0fc034782b8e3df14fe7556155e3.exe
Size 347KB
Sample240428-blgn6scf74
SHA256 345050de5e24fcf643d92c82ed0b6f240e1b0fc034782b8e3df14fe7556155e3
MD5 5536e9ce5737b4457b7d17c4adb2cd85
SHA1 46ba9c55e8f98769086ba13326b4109188205dc3
SHA512 e37578ccc5854642c78ab7fd92a1e21755a1ef11abca8f92e81d6b09ba2e9e28beb785ec5f5babec85dd2d641e73df920b0b8fc2fb674e77d1ee033b2b780a0a
SSDEEP 6144:8o+4WgjZb/JFOtrrcQfDowFsTPgZvaRGbmDgAsWrJhUN5m8BOI:5ZjZb/JfQboRTAvaYykBAfFI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
345050de5e24fcf643d92c82ed0b6f240e1b0fc034782b8e3df14fe7556155e3.exe

File Explorer

345050de5e24fcf643d92c82ed0b6f240e1b0fc034782b8e3df14fe7556155e3.exe

.exe 347KB

345050de5e24fcf643d92c82ed0b6f240e1b0fc034782b8e3df14fe7556155e3.exe

IMPHASH 2f726f40370b375fa05d60fc38904442
SHA256 345050de5e24fcf643d92c82ed0b6f240e1b0fc034782b8e3df14fe7556155e3
MD5 5536e9ce5737b4457b7d17c4adb2cd85
SHA1 46ba9c55e8f98769086ba13326b4109188205dc3
SHA512 e37578ccc5854642c78ab7fd92a1e21755a1ef11abca8f92e81d6b09ba2e9e28beb785ec5f5babec85dd2d641e73df920b0b8fc2fb674e77d1ee033b2b780a0a
SSDEEP 6144:8o+4WgjZb/JFOtrrcQfDowFsTPgZvaRGbmDgAsWrJhUN5m8BOI:5ZjZb/JfQboRTAvaYykBAfFI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFirmwareEnvironmentVariableA GetModuleHandleW GetProcessHeap ReadConsoleW GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW GetProcAddress GetLocaleInfoA SetFileAttributesA LoadLibraryA SetConsoleCtrlHandler SetConsoleDisplayMode SetCurrentDirectoryW SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA ScrollConsoleScreenBufferA FindAtomW SetStdHandle EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing