fcf64e9ed52eafbdc3f47abb46ba4606[.]exe

General

Target
fcf64e9ed52eafbdc3f47abb46ba4606.exe
Size 455KB
Sample240428-e2hsysga59
SHA256 59c2de875c225026789ad7a1cd5ffe9907ce6cc8c87ba03fe58ec496cfc1b74e
MD5 fcf64e9ed52eafbdc3f47abb46ba4606
SHA1 5efbd9889f48565bfddcd27f0e760529a4ac201b
SHA512 2fb5e5efe6936b8dee1dfe69805f021e127fcd32f714cf9459f7bccf6c3c5fd41355bfcae8e6c871e89c90f2b3b85c9967d3234d8f0a05158ae16814a0b8c35f
SSDEEP 6144:dndKNo69iOHScmTvdTtWxM0xJe5oTBCLV9n7s3ODEx:dnsN9SJZTtWxM0T3cnI3wEx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf64e9ed52eafbdc3f47abb46ba4606.exe

File Explorer

fcf64e9ed52eafbdc3f47abb46ba4606.exe

.exe 455KB

fcf64e9ed52eafbdc3f47abb46ba4606.exe

IMPHASH 8c8bbaaa682c013cc75d9e0c38f1112a
SHA256 59c2de875c225026789ad7a1cd5ffe9907ce6cc8c87ba03fe58ec496cfc1b74e
MD5 fcf64e9ed52eafbdc3f47abb46ba4606
SHA1 5efbd9889f48565bfddcd27f0e760529a4ac201b
SHA512 2fb5e5efe6936b8dee1dfe69805f021e127fcd32f714cf9459f7bccf6c3c5fd41355bfcae8e6c871e89c90f2b3b85c9967d3234d8f0a05158ae16814a0b8c35f
SSDEEP 6144:dndKNo69iOHScmTvdTtWxM0xJe5oTBCLV9n7s3ODEx:dnsN9SJZTtWxM0T3cnI3wEx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fugeneholok98 vexi.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing