750b1fee8af8f1842460934f82ef790f2fea7a7b18e7622d8c9f72460622b69f[.]exe

General

Target
750b1fee8af8f1842460934f82ef790f2fea7a7b18e7622d8c9f72460622b69f.exe
Size 380KB
Sample240531-brd58sag94
SHA256 750b1fee8af8f1842460934f82ef790f2fea7a7b18e7622d8c9f72460622b69f
MD5 48e7a13467ac5ba0e108da02e28ec34a
SHA1 b6ce2c1e1f9caacf6bb628a32ddd036984beefe2
SHA512 ce412d932175f04d41aaa78c19f0778ad1d38eaa6c6d06b09f7dec029bf30e9b070b413f448de57a18bbbd856105901aaf1e471850749fa1abc0af474c75f132
SSDEEP 6144:ANVyXbh7e7dn4qhym110BbBj1NKK7K8EtXz1syWhKZl9bCpsuXndT:ANIXbhS7Fx11U1Uz8OpcEBUn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
750b1fee8af8f1842460934f82ef790f2fea7a7b18e7622d8c9f72460622b69f.exe

File Explorer

750b1fee8af8f1842460934f82ef790f2fea7a7b18e7622d8c9f72460622b69f.exe

.exe 380KB

750b1fee8af8f1842460934f82ef790f2fea7a7b18e7622d8c9f72460622b69f.exe

IMPHASH f60d9bb04c40f0b0957242fb52e0df53
SHA256 750b1fee8af8f1842460934f82ef790f2fea7a7b18e7622d8c9f72460622b69f
MD5 48e7a13467ac5ba0e108da02e28ec34a
SHA1 b6ce2c1e1f9caacf6bb628a32ddd036984beefe2
SHA512 ce412d932175f04d41aaa78c19f0778ad1d38eaa6c6d06b09f7dec029bf30e9b070b413f448de57a18bbbd856105901aaf1e471850749fa1abc0af474c75f132
SSDEEP 6144:ANVyXbh7e7dn4qhym110BbBj1NKK7K8EtXz1syWhKZl9bCpsuXndT:ANIXbhS7Fx11U1Uz8OpcEBUn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LocalAlloc GetLastError SetLastError ReadProcessMemory _lopen OpenEventA LoadLibraryW LoadLibraryExW GetModuleFileNameW GetModuleHandleA GetSystemDirectoryW CreateDirectoryW SetFileAttributesW GetVolumeInformationW IsBadStringPtrW BuildCommDCBA SetComputerNameA SetInformationJobObject FindNextVolumeA FindNextVolumeMountPointW GetOEMCP GetCalendarInfoA GetNumberFormatA GetStringTypeA SetConsoleCursorInfo SetConsoleWindowInfo AddConsoleAliasW ReadFile SetEndOfFile WriteConsoleW SetFilePointerEx EncodePointer DecodePointer HeapFree RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapAlloc ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapSize GetProcessHeap IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetCurrentThreadId GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LCMapStringW IsValidCodePage GetACP GetCPInfo HeapReAlloc OutputDebugStringW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode CreateFileW CloseHandle SetStdHandle ReadConsoleW

user32

GetSysColorBrush GetMenu DdeKeepStringHandle

Sharing