deb1116c4183fb13e12441140167656729cf3a6b32b6488f2b6b72d578536e01[.]exe

General

Target
deb1116c4183fb13e12441140167656729cf3a6b32b6488f2b6b72d578536e01.exe
Size 4.3MB
Sample240604-sph5vabc9w
SHA256 deb1116c4183fb13e12441140167656729cf3a6b32b6488f2b6b72d578536e01
MD5 d4bed9420bd66fbf3c483e1dacabb726
SHA1 5e07a0b068b73b2c98b8aa44d96f2ad3b1b3b5a5
SHA512 2cc92afdc2fad8b2897e392461fa4ec1026b1ec22ed8e2c587330b107dc5298418ff9eb5f3ffabbd0c06cb1c869bf9bdc8a388e4e2382656b60a1637f44156b3
SSDEEP 98304:0nq/d8kCBelMyQjujDW9tBcg2jGqwwAXSY+139YOtYsnYT50kB3tiX9b:rcN5ujyp8jGqwwCq3t/2Ntm9b
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deb1116c4183fb13e12441140167656729cf3a6b32b6488f2b6b72d578536e01.exe

File Explorer

deb1116c4183fb13e12441140167656729cf3a6b32b6488f2b6b72d578536e01.exe

.exe 4.3MB

deb1116c4183fb13e12441140167656729cf3a6b32b6488f2b6b72d578536e01.exe

IMPHASH 73a99421c03d3f56333f368b6d96c755
SHA256 deb1116c4183fb13e12441140167656729cf3a6b32b6488f2b6b72d578536e01
MD5 d4bed9420bd66fbf3c483e1dacabb726
SHA1 5e07a0b068b73b2c98b8aa44d96f2ad3b1b3b5a5
SHA512 2cc92afdc2fad8b2897e392461fa4ec1026b1ec22ed8e2c587330b107dc5298418ff9eb5f3ffabbd0c06cb1c869bf9bdc8a388e4e2382656b60a1637f44156b3
SSDEEP 98304:0nq/d8kCBelMyQjujDW9tBcg2jGqwwAXSY+139YOtYsnYT50kB3tiX9b:rcN5ujyp8jGqwwCq3t/2Ntm9b
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

16896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\a\b\d_00000000_\b\out\Win32\Release\starter.pdb

kernel32

EnterCriticalSection LeaveCriticalSection InitializeCriticalSection WaitForSingleObject CreateEventW SetEvent CloseHandle ResetEvent DeleteCriticalSection LocalAlloc OpenProcess DeleteFileW RemoveDirectoryW GetModuleFileNameW GetLastError CreateDirectoryW CompareStringW GetTempPathW ExpandEnvironmentStringsW CreateProcessW CreateFileW GetSystemWindowsDirectoryW GetExitCodeProcess GetCurrentProcessId ReadFile FormatMessageW GetModuleHandleW GetFileAttributesW SetCurrentDirectoryW LoadLibraryExW GetProcAddress FreeLibrary LocalFree HeapFree GetProcessHeap MultiByteToWideChar GetSystemDirectoryW GetSystemWow64DirectoryW GetModuleHandleA GetCurrentProcess GetCurrentDirectoryW MoveFileW HeapAlloc GetLocalTime Sleep GetCurrentThreadId SetUnhandledExceptionFilter SetEnvironmentVariableW GetWindowsDirectoryW GetLongPathNameW LoadLibraryW SetDllDirectoryW SetLastError TlsSetValue VirtualProtect VirtualAlloc TlsAlloc GetSystemInfo FlushInstructionCache TlsGetValue TlsFree GetTickCount VirtualQuery RaiseException LoadLibraryExA FindResourceExW LoadResource LockResource SizeofResource WriteFile GetModuleFileNameA GetModuleHandleExA SetFilePointer FindNextFileW FindClose MoveFileExW GetTempFileNameW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx TryEnterCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW FormatMessageA FindFirstFileExW GetFileAttributesExW GetFileInformationByHandle SetFileInformationByHandle SetFilePointerEx AreFileApisANSI CopyFileW GetFileInformationByHandleEx WideCharToMultiByte GetStringTypeW QueryPerformanceCounter GetSystemTimeAsFileTime EncodePointer DecodePointer LCMapStringEx GetCPInfo UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwind InitializeCriticalSectionAndSpinCount CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize WriteConsoleW

Name

.text

Size

237KB

Virtual Size

237KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

75KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3.9MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

O)x8@

Size

18KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

deb1116c4183fb13e12441140167656729cf3a6b32b6488f2b6b72d578536e01.exe

kernel32

generic