64219f4d2644837ee3daa21509674404a8b316cfb6b80ed48fe98a4a534f94bd_x[.]exe

General

Target
64219f4d2644837ee3daa21509674404a8b316cfb6b80ed48fe98a4a534f94bd_x.exe
Size 273KB
Sample240430-nv7ceabe3s
SHA256 64219f4d2644837ee3daa21509674404a8b316cfb6b80ed48fe98a4a534f94bd
MD5 a7a476d82ccf49fcc87bfe5dd5a395a5
SHA1 0daa3664b2f86c3af059ca0c867bb1f928c760a2
SHA512 57bc1426b272bb79993f10587bcee0608d176e439b324354edd09099fe6a004cc91544893dc317192db92ba0d18d84be656c55acb1c9a4f934f9260442ee90e4
SSDEEP 6144:TEk00KpwnNeKgygYzRwtbhlcu2p77wmV:T90twnN3eiAaumV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64219f4d2644837ee3daa21509674404a8b316cfb6b80ed48fe98a4a534f94bd_x.exe

File Explorer

64219f4d2644837ee3daa21509674404a8b316cfb6b80ed48fe98a4a534f94bd_x.exe

.exe 273KB

64219f4d2644837ee3daa21509674404a8b316cfb6b80ed48fe98a4a534f94bd_x.exe

IMPHASH 6b0640163bb8257c74187780ba0143d2
SHA256 64219f4d2644837ee3daa21509674404a8b316cfb6b80ed48fe98a4a534f94bd
MD5 a7a476d82ccf49fcc87bfe5dd5a395a5
SHA1 0daa3664b2f86c3af059ca0c867bb1f928c760a2
SHA512 57bc1426b272bb79993f10587bcee0608d176e439b324354edd09099fe6a004cc91544893dc317192db92ba0d18d84be656c55acb1c9a4f934f9260442ee90e4
SSDEEP 6144:TEk00KpwnNeKgygYzRwtbhlcu2p77wmV:T90twnN3eiAaumV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zowadakokola\m.pdb

kernel32

GetComputerNameA GlobalMemoryStatus FindResourceA GetLocaleInfoA CommConfigDialogA LoadLibraryExW InterlockedDecrement CreateHardLinkA BackupSeek GetTickCount GetConsoleAliasesA EnumTimeFormatsA GetUserDefaultLangID SetCommState GlobalAlloc LoadLibraryW LocalShrink TerminateThread CreateEventA WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetLastError SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetTempPathA SetFileAttributesW GetVolumeInformationW EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing