4f9af410240401ada8d2eee48baf81dd7c33e990d7927fa1d456533cbfb37c6e[.]exe

General

Target
4f9af410240401ada8d2eee48baf81dd7c33e990d7927fa1d456533cbfb37c6e.exe
Size 814KB
Sample240529-bsn2tsde69
SHA256 4f9af410240401ada8d2eee48baf81dd7c33e990d7927fa1d456533cbfb37c6e
MD5 7265daee89e587ef7bfae3359391c6de
SHA1 918a6401d39ddcea8a9f34c37715deddf0e206ee
SHA512 b568c459eea4df96d0ca6f6e15f88c8267aa8a2ed4646e5704f3c14217ed8609106b87b9534d1a56b775af45592d92f41f935712e7808f4e3aea201e17fcc18a
SSDEEP 12288:XroYw+GVNfSQwgQWJeYldTogJGKDcX7kbpQW6tBxU2Vke7qs4vtP/XDVcM41:7ovFSQnICntcAwrU2b+13DVh4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f9af410240401ada8d2eee48baf81dd7c33e990d7927fa1d456533cbfb37c6e.exe

File Explorer

4f9af410240401ada8d2eee48baf81dd7c33e990d7927fa1d456533cbfb37c6e.exe

.exe 814KB

4f9af410240401ada8d2eee48baf81dd7c33e990d7927fa1d456533cbfb37c6e.exe

IMPHASH 8652ae09cd41f3f67008d9ea632df14b
SHA256 4f9af410240401ada8d2eee48baf81dd7c33e990d7927fa1d456533cbfb37c6e
MD5 7265daee89e587ef7bfae3359391c6de
SHA1 918a6401d39ddcea8a9f34c37715deddf0e206ee
SHA512 b568c459eea4df96d0ca6f6e15f88c8267aa8a2ed4646e5704f3c14217ed8609106b87b9534d1a56b775af45592d92f41f935712e7808f4e3aea201e17fcc18a
SSDEEP 12288:XroYw+GVNfSQwgQWJeYldTogJGKDcX7kbpQW6tBxU2Vke7qs4vtP/XDVcM41:7ovFSQnICntcAwrU2b+13DVh4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16087

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalAlloc GetLastError SetLastError SetThreadContext GetTickCount _lopen CreateEventW LoadLibraryA LoadLibraryW LoadLibraryExA GetModuleFileNameW GetModuleHandleA GetSystemDirectoryA CreateDirectoryA SetFileAttributesW GetVolumeInformationW GetProcAddress BuildCommDCBA CommConfigDialogA SetComputerNameExA SetInformationJobObject FindNextVolumeA SetVolumeMountPointA GetACP GetLocaleInfoA GetNumberFormatA GetStringTypeW SetConsoleCursorInfo AllocConsole AddConsoleAliasW CloseHandle WriteConsoleW SetFilePointerEx IsBadStringPtrA InterlockedExchange EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineW IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent LCMapStringW EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc OutputDebugStringW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle CreateFileW

user32

GetSysColorBrush DdeKeepStringHandle

gdi32

GetCharWidthW

Sharing