1b3ef6f1ca45d8937bd08ffda49104747b0c3e944458453825ee0adbdc31ddad[.]exe

General

Target
1b3ef6f1ca45d8937bd08ffda49104747b0c3e944458453825ee0adbdc31ddad.exe
Size 498KB
Sample240604-bfl2psge69
SHA256 1b3ef6f1ca45d8937bd08ffda49104747b0c3e944458453825ee0adbdc31ddad
MD5 6cfa84643d60ac319d389be1699a31f7
SHA1 c3476c680c477d6c5360b7545006c15dc4909857
SHA512 119456fb88d7aef17544d63270ae2c0e62e93de5b92c2cb807875e887d29ea0ab6eead4b5dfe4f5ac0e150e79195e43a6fc502a9a0cf568272f03ff428092031
SSDEEP 12288:T7yASHFN3NQORJU/NtnzRfc212VAJLmOSXW6VES:T7y3lN3RWN1K2g27SXWD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b3ef6f1ca45d8937bd08ffda49104747b0c3e944458453825ee0adbdc31ddad.exe

File Explorer

1b3ef6f1ca45d8937bd08ffda49104747b0c3e944458453825ee0adbdc31ddad.exe

.exe 498KB

1b3ef6f1ca45d8937bd08ffda49104747b0c3e944458453825ee0adbdc31ddad.exe

IMPHASH 7295391572376b8588f4ae34ead7b21f
SHA256 1b3ef6f1ca45d8937bd08ffda49104747b0c3e944458453825ee0adbdc31ddad
MD5 6cfa84643d60ac319d389be1699a31f7
SHA1 c3476c680c477d6c5360b7545006c15dc4909857
SHA512 119456fb88d7aef17544d63270ae2c0e62e93de5b92c2cb807875e887d29ea0ab6eead4b5dfe4f5ac0e150e79195e43a6fc502a9a0cf568272f03ff428092031
SSDEEP 12288:T7yASHFN3NQORJU/NtnzRfc212VAJLmOSXW6VES:T7y3lN3RWN1K2g27SXWD
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

29688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc WaitForSingleObjectEx FreeConsole CreateThread WideCharToMultiByte GetCurrentThreadId CloseHandle GetExitCodeThread EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx ReleaseSRWLockExclusive WakeAllConditionVariable QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing