b1e5b7f8b0649b5b6b6c1225f775eaa8700e153b44a4245b45bb2797bbcb288b[.]exe

General

Target
b1e5b7f8b0649b5b6b6c1225f775eaa8700e153b44a4245b45bb2797bbcb288b.exe
Size 20KB
Sample240601-b6ltmaec29
SHA256 b1e5b7f8b0649b5b6b6c1225f775eaa8700e153b44a4245b45bb2797bbcb288b
MD5 df2886a054118bfad2738351878987f5
SHA1 3837d248ed66fef6cca8bb59f4e73b620126c52c
SHA512 5843d901e19273961be23eb33f4b459ff896103ec50e08d331e196f83384ed30ba6513ce0770b0f8227d28ad799358e88fd0a191c16c85cd67bcd993a3540bd6
SSDEEP 384:+EpiPNDeVU9iCUAdAAtlYxJ4JVB00FXMSKR:IPNaVUhU+LYOvFX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1e5b7f8b0649b5b6b6c1225f775eaa8700e153b44a4245b45bb2797bbcb288b.exe

File Explorer

b1e5b7f8b0649b5b6b6c1225f775eaa8700e153b44a4245b45bb2797bbcb288b.exe

.exe 20KB

b1e5b7f8b0649b5b6b6c1225f775eaa8700e153b44a4245b45bb2797bbcb288b.exe

IMPHASH fb0ee5bafbb99ce467989526f0be15c6
SHA256 b1e5b7f8b0649b5b6b6c1225f775eaa8700e153b44a4245b45bb2797bbcb288b
MD5 df2886a054118bfad2738351878987f5
SHA1 3837d248ed66fef6cca8bb59f4e73b620126c52c
SHA512 5843d901e19273961be23eb33f4b459ff896103ec50e08d331e196f83384ed30ba6513ce0770b0f8227d28ad799358e88fd0a191c16c85cd67bcd993a3540bd6
SSDEEP 384:+EpiPNDeVU9iCUAdAAtlYxJ4JVB00FXMSKR:IPNaVUhU+LYOvFX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12075

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathCombineW StrCmpNW

msvcr90

_crt_debugger_hook _controlfp_s _invoke_watson _except_handler4_common _decode_pointer _onexit _lock __dllonexit _unlock ?terminate@@YAXXZ __set_app_type _encode_pointer __p__fmode __p__commode _adjust_fdiv __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln exit _ismbblead _XcptFilter _exit _cexit __getmainargs _amsg_exit wcsstr memcpy memset

kernel32

IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter SetUnhandledExceptionFilter GetStartupInfoA InterlockedCompareExchange InterlockedExchange ExitThread FindFirstFileW lstrcmpW FindNextFileW GetLogicalDrives GetDriveTypeW QueryDosDeviceW lstrcpyW GetFileSize CreateFileMappingA MapViewOfFile FlushViewOfFile UnmapViewOfFile SetFilePointer SetEndOfFile CreateFileW CloseHandle CreateThread ExitProcess GetLastError CreateMutexA Sleep

user32

CharLowerW

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

ole32

CoInitializeEx

Sharing