5b9c150e2c1c77bdd1f1f8fa35e9b3ff38d32182e2d0be0e9c438676fd10680c[.]exe

General

Target
5b9c150e2c1c77bdd1f1f8fa35e9b3ff38d32182e2d0be0e9c438676fd10680c.exe
Size 419KB
Sample240430-bscc2agc22
SHA256 5b9c150e2c1c77bdd1f1f8fa35e9b3ff38d32182e2d0be0e9c438676fd10680c
MD5 21447adc4982eb273300367dece5bfec
SHA1 c017eba72e66ba7a52dace54af6ff6796cad86bb
SHA512 bebbb510e7ff94957f7865e7ce250917786bc2ab8bb6ae2c84e5d5ad972dade5761d8d3942e524a3ec4ccf70d9fe4d90f8c91d0e05edd62995cebee4e3468650
SSDEEP 6144:JWigHbPbnW5OdaZLB+zKwTTfRLpEGzYSIpB5Apy3E6f:JZ2zzsZN+JTTlptIp7AIU6f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b9c150e2c1c77bdd1f1f8fa35e9b3ff38d32182e2d0be0e9c438676fd10680c.exe

File Explorer

5b9c150e2c1c77bdd1f1f8fa35e9b3ff38d32182e2d0be0e9c438676fd10680c.exe

.exe 419KB

5b9c150e2c1c77bdd1f1f8fa35e9b3ff38d32182e2d0be0e9c438676fd10680c.exe

IMPHASH dbae00ef186abcf460fe21c920859d79
SHA256 5b9c150e2c1c77bdd1f1f8fa35e9b3ff38d32182e2d0be0e9c438676fd10680c
MD5 21447adc4982eb273300367dece5bfec
SHA1 c017eba72e66ba7a52dace54af6ff6796cad86bb
SHA512 bebbb510e7ff94957f7865e7ce250917786bc2ab8bb6ae2c84e5d5ad972dade5761d8d3942e524a3ec4ccf70d9fe4d90f8c91d0e05edd62995cebee4e3468650
SSDEEP 6144:JWigHbPbnW5OdaZLB+zKwTTfRLpEGzYSIpB5Apy3E6f:JZ2zzsZN+JTTlptIp7AIU6f
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW GetCommState GetModuleHandleW GetProcessHeap GetDateFormatA GlobalAlloc LoadLibraryW HeapDestroy IsBadWritePtr GetModuleFileNameW SetConsoleTitleA GlobalUnfix SetCurrentDirectoryA GetProcAddress SetFirmwareEnvironmentVariableW GetConsoleAliasExesLengthA LoadLibraryA GetFileType SetConsoleDisplayMode WaitForMultipleObjects FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW GetVolumeInformationW BuildCommDCBW GetLocaleInfoA CreateFileA HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetProcessDefaultLayout

advapi32

ReadEventLogA

ole32

CoTaskMemFree

Sharing