68920bc511f7a7f19cadc9246be64823371917b12fed68363238f6e229abe53a[.]exe

General

Target
68920bc511f7a7f19cadc9246be64823371917b12fed68363238f6e229abe53a.exe
Size 390KB
Sample240522-yffk9aeb74
SHA256 68920bc511f7a7f19cadc9246be64823371917b12fed68363238f6e229abe53a
MD5 e7081b76e2f295744f0b5761a4e7527b
SHA1 009d87a962cb12d11983f2aaf0e43d689da4504d
SHA512 d694050f1f298938fcf80a196a73ff5650250ed82d97cc30f49fee57a02d9b4562a3217317cebc5871183751249428640e16153a7a55fd6df48edabc7619b63e
SSDEEP 6144:p8wjRsB+R2tRTQYTuBQ3a536Nuw5WWuEbI92aPSC9:pbiB+R2tVQ8uBQ3a536GW1iPSa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68920bc511f7a7f19cadc9246be64823371917b12fed68363238f6e229abe53a.exe

File Explorer

68920bc511f7a7f19cadc9246be64823371917b12fed68363238f6e229abe53a.exe

.exe 390KB

68920bc511f7a7f19cadc9246be64823371917b12fed68363238f6e229abe53a.exe

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 68920bc511f7a7f19cadc9246be64823371917b12fed68363238f6e229abe53a
MD5 e7081b76e2f295744f0b5761a4e7527b
SHA1 009d87a962cb12d11983f2aaf0e43d689da4504d
SHA512 d694050f1f298938fcf80a196a73ff5650250ed82d97cc30f49fee57a02d9b4562a3217317cebc5871183751249428640e16153a7a55fd6df48edabc7619b63e
SSDEEP 6144:p8wjRsB+R2tRTQYTuBQ3a536Nuw5WWuEbI92aPSC9:pbiB+R2tVQ8uBQ3a536GW1iPSa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing