48bc1d427c46a8e213d03ce347162f3fd2076766ddff3e70bd52b95f967e8e49[.]exe

General

Target
48bc1d427c46a8e213d03ce347162f3fd2076766ddff3e70bd52b95f967e8e49.exe
Size 412KB
Sample240616-bhck2ssgla
SHA256 48bc1d427c46a8e213d03ce347162f3fd2076766ddff3e70bd52b95f967e8e49
MD5 199b3fac9ac583cee18d6967a14ad6f4
SHA1 71875ea5dbd2ed7e16b34476e1f05fcbe164603d
SHA512 b00cd6e4fa3764c0a7a9a3c1f2648a49f6281979f7f574fa7639d721c11aa0e8fc2ab0f1d29070bee5f4db20f92bf78104bf0b05bfe6fde2db501e36816bb488
SSDEEP 6144:z2DUGv8rrPDXLU7nUp57KPBOgssDeKBQhkldbUu+fVDF9w9fdtE/fEwqGS:z2xv8rjDT7cWsDVQhkldbEo9VYRS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48bc1d427c46a8e213d03ce347162f3fd2076766ddff3e70bd52b95f967e8e49.exe

File Explorer

48bc1d427c46a8e213d03ce347162f3fd2076766ddff3e70bd52b95f967e8e49.exe

.exe 412KB

48bc1d427c46a8e213d03ce347162f3fd2076766ddff3e70bd52b95f967e8e49.exe

IMPHASH 258254eab46bb890db2dc62437d512d1
SHA256 48bc1d427c46a8e213d03ce347162f3fd2076766ddff3e70bd52b95f967e8e49
MD5 199b3fac9ac583cee18d6967a14ad6f4
SHA1 71875ea5dbd2ed7e16b34476e1f05fcbe164603d
SHA512 b00cd6e4fa3764c0a7a9a3c1f2648a49f6281979f7f574fa7639d721c11aa0e8fc2ab0f1d29070bee5f4db20f92bf78104bf0b05bfe6fde2db501e36816bb488
SSDEEP 6144:z2DUGv8rrPDXLU7nUp57KPBOgssDeKBQhkldbUu+fVDF9w9fdtE/fEwqGS:z2xv8rjDT7cWsDVQhkldbEo9VYRS
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

39991

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle WaitForSingleObject CreateThread VirtualAlloc QueryPerformanceCounter QueryPerformanceFrequency Sleep GetCurrentThreadId WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess WriteConsoleW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW HeapSize

Sharing