39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657[.]exe

General

Target
39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe
Size 228KB
Sample240522-brkm1sga6v
SHA256 39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657
MD5 6dd21638dac079e394096b1b018d5638
SHA1 b57f820d6bda6109f67155a5636965b034fd96d2
SHA512 9b9d808236d9c432b9c9d87e5812daa99b3d0cf31c34da8477713dd575b5f0b9a05b362e367f530815a1e1a10789ae1aa93f9759e42fe309eea7f05b9a5e0d27
SSDEEP 3072:Ar9ft1WgkACOZVw+UmB4dlXny76VrY4TKQHBAgzVLK0ImGTXuVnuBZ40Uda:AEdtKyVHRxBBYDmeuRCZ40
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe

File Explorer

39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe

.exe 228KB

39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe

IMPHASH 965b002ae05e80f1dd898254cb5f61fa
SHA256 39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657
MD5 6dd21638dac079e394096b1b018d5638
SHA1 b57f820d6bda6109f67155a5636965b034fd96d2
SHA512 9b9d808236d9c432b9c9d87e5812daa99b3d0cf31c34da8477713dd575b5f0b9a05b362e367f530815a1e1a10789ae1aa93f9759e42fe309eea7f05b9a5e0d27
SSDEEP 3072:Ar9ft1WgkACOZVw+UmB4dlXny76VrY4TKQHBAgzVLK0ImGTXuVnuBZ40Uda:AEdtKyVHRxBBYDmeuRCZ40
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TzSpecificLocalTimeToSystemTime GetVolumeInformationA WriteConsoleW GetSystemDirectoryA SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress GetTickCount LoadLibraryA WriteConsoleA LocalAlloc GetNumberFormatW CreateEventW GetModuleFileNameA LoadLibraryExA BuildCommDCBA VirtualProtect PurgeComm SetFileAttributesW RemoveDirectoryA GetConsoleAliasA IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection HeapFree ReadFile SetFilePointerEx DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleMode ReadConsoleW SetStdHandle FlushFileBuffers GetConsoleCP OutputDebugStringW GetStringTypeW CreateFileW CloseHandle SetEndOfFile

gdi32

GetCharWidthI

Sharing