32021a9f3f6e204120dfa1982419da8edd43acf5d56b21ba707018c242879702[.]exe

General

Target
32021a9f3f6e204120dfa1982419da8edd43acf5d56b21ba707018c242879702.exe
Size 365KB
Sample240610-cbbkvaba35
SHA256 32021a9f3f6e204120dfa1982419da8edd43acf5d56b21ba707018c242879702
MD5 05a350f1dfc73b59e072bb6b41246cd4
SHA1 8c869b0eb1928f9c6060d49814f725e1cb2a937c
SHA512 549d6de6e093a4b378ae8c87864cfb4adeeca0710e9cd22be891dab10dd5991e4f23d3152196de20dba0c0eb3d089c10bcf94baf18ce5c39ecf15b60c1ec0b33
SSDEEP 6144:VdRLH261yUqFKzLAOFFyGvpi5AOVuML1fTJf7I:BD2AyU+KAO7yqNO8MBVf7I
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32021a9f3f6e204120dfa1982419da8edd43acf5d56b21ba707018c242879702.exe

File Explorer

32021a9f3f6e204120dfa1982419da8edd43acf5d56b21ba707018c242879702.exe

.exe 365KB

32021a9f3f6e204120dfa1982419da8edd43acf5d56b21ba707018c242879702.exe

IMPHASH 0430d78ef3f9cedd69689b351fbb4021
SHA256 32021a9f3f6e204120dfa1982419da8edd43acf5d56b21ba707018c242879702
MD5 05a350f1dfc73b59e072bb6b41246cd4
SHA1 8c869b0eb1928f9c6060d49814f725e1cb2a937c
SHA512 549d6de6e093a4b378ae8c87864cfb4adeeca0710e9cd22be891dab10dd5991e4f23d3152196de20dba0c0eb3d089c10bcf94baf18ce5c39ecf15b60c1ec0b33
SSDEEP 6144:VdRLH261yUqFKzLAOFFyGvpi5AOVuML1fTJf7I:BD2AyU+KAO7yqNO8MBVf7I
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9119

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetTimeFormatA GetModuleHandleW GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA FormatMessageA LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW lstrcpynW FindNextVolumeW GetConsoleAliasW FileTimeToSystemTime CompareStringW SetConsoleTitleA CreateJobObjectA GetNamedPipeHandleStateW SetThreadLocale EnumCalendarInfoW GetProcAddress SetVolumeLabelW BuildCommDCBW LoadLibraryA UnhandledExceptionFilter LocalAlloc GetModuleFileNameA SetConsoleCursorInfo lstrcatW GetProcessAffinityMask PurgeComm EnumDateFormatsW DeleteCriticalSection FindAtomW DeleteAtom OpenFileMappingA EnumCalendarInfoExA SetLastError InterlockedIncrement GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

LoadIconA

advapi32

SetThreadToken

Sharing