MicrosoftDebugger[.]exe

General

Target
MicrosoftDebugger.exe
Size 101KB
Sample240611-n589rawcpc
SHA256 10d6eda28eab6b3c3f3ce1183ddc2ddf39559eaf090d794b95b2c481b25241a5
MD5 894aae812eb6f72bbd33c795d4db67fb
SHA1 b6e089caab3470431b18316ffd82ea49783d4a72
SHA512 0ad002903e4d0bf50578630f0dfe7f943632c6562871caa07cd527a19ddf50cb2f888334e6574b3fe39ff176fbb0cda60cb1612c96f91921f0421230503baec1
SSDEEP 3072:pJrwXlyq82c0PTuMqSwNd4IYh5eWBgaQE:HYJy0pqDfE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MicrosoftDebugger.exe

File Explorer

MicrosoftDebugger.exe

.exe 101KB

MicrosoftDebugger.exe

IMPHASH 6b22fc93ef6dd91d56b19ec19d356f0e
SHA256 10d6eda28eab6b3c3f3ce1183ddc2ddf39559eaf090d794b95b2c481b25241a5
MD5 894aae812eb6f72bbd33c795d4db67fb
SHA1 b6e089caab3470431b18316ffd82ea49783d4a72
SHA512 0ad002903e4d0bf50578630f0dfe7f943632c6562871caa07cd527a19ddf50cb2f888334e6574b3fe39ff176fbb0cda60cb1612c96f91921f0421230503baec1
SSDEEP 3072:pJrwXlyq82c0PTuMqSwNd4IYh5eWBgaQE:HYJy0pqDfE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8753

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

kernel32

Sleep UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RaiseException RtlUnwind GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW DecodePointer

Resubmissions

Sharing