4219e5a081c62567d3fb9e490c2a7a3e[.]exe

General

Target
4219e5a081c62567d3fb9e490c2a7a3e.exe
Size 456KB
Sample240428-ld7kqsce98
SHA256 7d7cc308f2cd107a42ea8c32e8c06d6b684417a1fa8951072a707a1838a2d3f5
MD5 4219e5a081c62567d3fb9e490c2a7a3e
SHA1 9bca001a792bcb69b87b78e6f8e9d7e214e8655e
SHA512 d94d23ac7060e309fbbe87bd8762f35fdcd516f66e626adf3522bef7c011619eb176441d0f0786765e9bc041644c81fc426ea0c99f9d3f052cb4c684badd04a1
SSDEEP 6144:Hb1m+ZBBrVw6UuNeqsGqJJ2hUOWXzt1YyQut4Mq75gQ/l67I2XDihjZd:7c+5vdsGguOt1YyN4MyN/EQZd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4219e5a081c62567d3fb9e490c2a7a3e.exe

File Explorer

4219e5a081c62567d3fb9e490c2a7a3e.exe

.exe 456KB

4219e5a081c62567d3fb9e490c2a7a3e.exe

IMPHASH f654e5c1b5e321f3cf66a20ff016ccab
SHA256 7d7cc308f2cd107a42ea8c32e8c06d6b684417a1fa8951072a707a1838a2d3f5
MD5 4219e5a081c62567d3fb9e490c2a7a3e
SHA1 9bca001a792bcb69b87b78e6f8e9d7e214e8655e
SHA512 d94d23ac7060e309fbbe87bd8762f35fdcd516f66e626adf3522bef7c011619eb176441d0f0786765e9bc041644c81fc426ea0c99f9d3f052cb4c684badd04a1
SSDEEP 6144:Hb1m+ZBBrVw6UuNeqsGqJJ2hUOWXzt1YyQut4Mq75gQ/l67I2XDihjZd:7c+5vdsGguOt1YyN4MyN/EQZd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fucatexo.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing