9232e72b8f32a28c5f2b4d2ae34f31928edb0bea80d49b6e9698533c956099bf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
9232e72b8f32a28c5f2b4d2ae34f31928edb0bea80d49b6e9698533c956099bf.exe
Size 77KB
Sample240624-bm2ezasepd
SHA256 9232e72b8f32a28c5f2b4d2ae34f31928edb0bea80d49b6e9698533c956099bf
MD5 391cbe063cc62461586abec2bcd876fa
SHA1 f84420b4f464fec794bab6b8414486033217c413
SHA512 5d49be6617d52e999be7837f6553eb63c271788471c3b4be85d6052adaa4a3bde6b496f6564c98bd11638a869017931fd63f2b0e9de80bdb670857d4c9e8e75c
SSDEEP 384:SFtIoDutVIV0KLabYh/2ZqLfeT0zXyBIg0xCI1gSONmvHHPvNkOI2QfBlK5eTs1e:S6K2bY57y+gyi0fHPv+OIPB5Ts15Ab9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9232e72b8f32a28c5f2b4d2ae34f31928edb0bea80d49b6e9698533c956099bf.exe

File Explorer

9232e72b8f32a28c5f2b4d2ae34f31928edb0bea80d49b6e9698533c956099bf.exe

.exe 77KB

9232e72b8f32a28c5f2b4d2ae34f31928edb0bea80d49b6e9698533c956099bf.exe

IMPHASH 82feeecb5d1ffa420ec7f4dfa625a2d1
SHA256 9232e72b8f32a28c5f2b4d2ae34f31928edb0bea80d49b6e9698533c956099bf
MD5 391cbe063cc62461586abec2bcd876fa
SHA1 f84420b4f464fec794bab6b8414486033217c413
SHA512 5d49be6617d52e999be7837f6553eb63c271788471c3b4be85d6052adaa4a3bde6b496f6564c98bd11638a869017931fd63f2b0e9de80bdb670857d4c9e8e75c
SSDEEP 384:SFtIoDutVIV0KLabYh/2ZqLfeT0zXyBIg0xCI1gSONmvHHPvNkOI2QfBlK5eTs1e:S6K2bY57y+gyi0fHPv+OIPB5Ts15Ab9
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70517

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Mafia\source\repos\ConsoleApplication3\x64\Debug\ConsoleApplication3.pdb

kernel32

HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetModuleHandleW GetLastError GetConsoleWindow GetStartupInfoW InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WideCharToMultiByte MultiByteToWideChar RaiseException IsDebuggerPresent GetCurrentThreadId GetProcAddress

user32

ReleaseDC GetDC ShowWindow GetClientRect FindWindowW

gdi32

DeleteObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap BitBlt SelectObject

msvcp140d

?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?uncaught_exception@std@@YA_NXZ ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z

gdiplus

GdipGetImageEncodersSize GdipCreateBitmapFromHBITMAP GdipSaveImageToFile GdipDisposeImage GdipCloneImage GdiplusShutdown GdiplusStartup GdipGetImageEncoders GdipAlloc GdipFree

vcruntime140_1d

__CxxFrameHandler4

vcruntime140d

__vcrt_GetModuleHandleW __vcrt_LoadLibraryExW __current_exception_context __vcrt_GetModuleFileNameW __C_specific_handler __current_exception __std_type_info_destroy_list __C_specific_handler_noexcept

ucrtbased

strcat_s __stdio_common_vsprintf_s _seh_filter_dll _initialize_onexit_table _register_onexit_function _execute_onexit_table __p__commode _crt_at_quick_exit terminate _wmakepath_s _wsplitpath_s wcscpy_s _free_dbg wcscmp _set_new_mode _configthreadlocale _register_thread_local_exe_atexit_callback wcslen _cexit __p___argv __p___argc _set_fmode _exit exit _initterm_e strcpy_s _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __setusermatherr _set_app_type _seh_filter_exe _CrtDbgReportW free _crt_atexit malloc _c_exit _CrtDbgReport

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

1024B

Virtual Size

583B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

355B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

9232e72b8f32a28c5f2b4d2ae34f31928edb0bea80d49b6e9698533c956099bf.exe

kernel32

user32

gdi32

msvcp140d

gdiplus

vcruntime140_1d

vcruntime140d

ucrtbased

generic