1691b1ffa5c27ee1273bbc3a6768026e8fcb815d3dd3b11c99de8e915df7bffb[.]exe

General

Target
1691b1ffa5c27ee1273bbc3a6768026e8fcb815d3dd3b11c99de8e915df7bffb.exe
Size 467KB
Sample240613-be2e1aybpd
SHA256 1691b1ffa5c27ee1273bbc3a6768026e8fcb815d3dd3b11c99de8e915df7bffb
MD5 994820e52e73ea1e5f466a9d647ff727
SHA1 0c26942023222df2d415c32ffa7d3c4f4f761035
SHA512 8cb65d0e34b45ab8c5d22fa061594ef2c404bb9e2df6dd8d8fec61518f191b5bcf5bcf07d4d6912d52e464d2f417f0e2b11f415c48b295196688c8608965ec1d
SSDEEP 6144:T3PjMAbo8tdR6tivMh2WL+k3EbfJpmvhuFlLeuhtHSkJgiwJH7uHFmm9iXjq0GQ2:TIYo8tdR60GAJpUuFpV/yVNH7AqXjp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1691b1ffa5c27ee1273bbc3a6768026e8fcb815d3dd3b11c99de8e915df7bffb.exe

File Explorer

1691b1ffa5c27ee1273bbc3a6768026e8fcb815d3dd3b11c99de8e915df7bffb.exe

.exe 467KB

1691b1ffa5c27ee1273bbc3a6768026e8fcb815d3dd3b11c99de8e915df7bffb.exe

IMPHASH ca5b12a2f3a3c8ec1ab5f89f236db1bb
SHA256 1691b1ffa5c27ee1273bbc3a6768026e8fcb815d3dd3b11c99de8e915df7bffb
MD5 994820e52e73ea1e5f466a9d647ff727
SHA1 0c26942023222df2d415c32ffa7d3c4f4f761035
SHA512 8cb65d0e34b45ab8c5d22fa061594ef2c404bb9e2df6dd8d8fec61518f191b5bcf5bcf07d4d6912d52e464d2f417f0e2b11f415c48b295196688c8608965ec1d
SSDEEP 6144:T3PjMAbo8tdR6tivMh2WL+k3EbfJpmvhuFlLeuhtHSkJgiwJH7uHFmm9iXjq0GQ2:TIYo8tdR60GAJpUuFpV/yVNH7AqXjp
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

63931

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

CreateCaret

shell32

ExtractIconExA

kernel32

GetCPInfo WriteConsoleW HeapSize CreateFileW CloseHandle WaitForSingleObject WaitForSingleObjectEx CreateThread VirtualAlloc RaiseException InitOnceBeginInitialize InitOnceComplete GetCurrentThreadId GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress SetEndOfFile GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess GetProcessHeap RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle

Name

.text

Size

192KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

214KB

Virtual Size

218KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bsS

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1691b1ffa5c27ee1273bbc3a6768026e8fcb815d3dd3b11c99de8e915df7bffb.exe

user32

shell32

kernel32

generic