276351bbf592f164b3c090947a16192199f8c51f70330b7e840a81aef7a2fb1f[.]exe

General

Target
276351bbf592f164b3c090947a16192199f8c51f70330b7e840a81aef7a2fb1f.exe
Size 451KB
Sample240430-bjs97agc41
SHA256 276351bbf592f164b3c090947a16192199f8c51f70330b7e840a81aef7a2fb1f
MD5 80a85759d45b1ebf79075db26015acb1
SHA1 72140359ce537e3fee86171641ccc70e0800a274
SHA512 c532e9829e011a3397a140c088aece4d234c86ec38d36988e871d479765874cd3f093944471f9fa99908eb36531692cea858567cd20e70da2ab288f6e08a6334
SSDEEP 12288:Dt++0WACRaBnCQ08O0y+li0pUIZ53+gXWN1RUh:ihC1gp+Qk1RUh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
276351bbf592f164b3c090947a16192199f8c51f70330b7e840a81aef7a2fb1f.exe

File Explorer

276351bbf592f164b3c090947a16192199f8c51f70330b7e840a81aef7a2fb1f.exe

.exe 451KB

276351bbf592f164b3c090947a16192199f8c51f70330b7e840a81aef7a2fb1f.exe

IMPHASH f8d3d580c89ab890cee57ed29743eeb7
SHA256 276351bbf592f164b3c090947a16192199f8c51f70330b7e840a81aef7a2fb1f
MD5 80a85759d45b1ebf79075db26015acb1
SHA1 72140359ce537e3fee86171641ccc70e0800a274
SHA512 c532e9829e011a3397a140c088aece4d234c86ec38d36988e871d479765874cd3f093944471f9fa99908eb36531692cea858567cd20e70da2ab288f6e08a6334
SSDEEP 12288:Dt++0WACRaBnCQ08O0y+li0pUIZ53+gXWN1RUh:ihC1gp+Qk1RUh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\daho.pdb

kernel32

GetSystemDefaultLangID GetComputerNameA GlobalMemoryStatus FindResourceA GetLocaleInfoA CommConfigDialogA LoadLibraryExW InterlockedDecrement CreateHardLinkA BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA CreateEventA WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetLastError SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetVersionExA GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetProcessHeap GetStdHandle GetFileType GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing