7ffdaf476524a9f3c0966b1fa0cb5551d542f310e6ed20d8832ca10b48e29dc9[.]exe

General

Target
7ffdaf476524a9f3c0966b1fa0cb5551d542f310e6ed20d8832ca10b48e29dc9.exe
Size 486KB
Sample240621-bq6tvsvbma
SHA256 7ffdaf476524a9f3c0966b1fa0cb5551d542f310e6ed20d8832ca10b48e29dc9
MD5 09371b0ec59d68d008b7c08a10de35cb
SHA1 3f8ea250788004d66680f2837352814f34eb2881
SHA512 4639e53f144de0d0c7160313f342fd0d25d20e19093b3bd87789a88820d660d5a44b135a0de1b9143ee38404fcd70ac850ee3169082eb46c6107bf82b46ab2d5
SSDEEP 6144:PQtL23MN3MyDFPfhLGNX1yH9pcYpPa3Yc/LLLXKUI:Ui3MNZ9fY29xpy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ffdaf476524a9f3c0966b1fa0cb5551d542f310e6ed20d8832ca10b48e29dc9.exe

File Explorer

7ffdaf476524a9f3c0966b1fa0cb5551d542f310e6ed20d8832ca10b48e29dc9.exe

.exe 486KB

7ffdaf476524a9f3c0966b1fa0cb5551d542f310e6ed20d8832ca10b48e29dc9.exe

IMPHASH aec527db97155c04ecadc13b1ffbed68
SHA256 7ffdaf476524a9f3c0966b1fa0cb5551d542f310e6ed20d8832ca10b48e29dc9
MD5 09371b0ec59d68d008b7c08a10de35cb
SHA1 3f8ea250788004d66680f2837352814f34eb2881
SHA512 4639e53f144de0d0c7160313f342fd0d25d20e19093b3bd87789a88820d660d5a44b135a0de1b9143ee38404fcd70ac850ee3169082eb46c6107bf82b46ab2d5
SSDEEP 6144:PQtL23MN3MyDFPfhLGNX1yH9pcYpPa3Yc/LLLXKUI:Ui3MNZ9fY29xpy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetNumaProcessorNode GetLocaleInfoA GetStringTypeA GlobalAddAtomA GetCommState GetConsoleAliasA InterlockedDecrement SetDefaultCommConfigW GetNamedPipeHandleStateA GetTimeFormatA GetModuleHandleW GetTickCount EnumCalendarInfoExW GlobalAlloc LoadLibraryW SetVolumeMountPointA FormatMessageW WriteConsoleOutputA lstrcpynW LocalReAlloc GetModuleFileNameW RaiseException CreateJobObjectA GetConsoleAliasesW GetLastError GetThreadLocale GetProcAddress GetLongPathNameA SetVolumeLabelW BuildCommDCBW LoadLibraryA WriteConsoleA RegisterWaitForSingleObject SetCalendarInfoW OpenJobObjectW lstrcatW GetConsoleTitleW FindAtomW FileTimeToLocalFileTime OpenFileMappingA EnumCalendarInfoExA FindNextVolumeA AreFileApisANSI HeapAlloc HeapReAlloc GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle HeapSize LCMapStringA LCMapStringW GetStringTypeW ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

Sharing