a93a0b125c19135c7a7def5d8fe1219885e61a45f0b962103e726086179b35b8[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a93a0b125c19135c7a7def5d8fe1219885e61a45f0b962103e726086179b35b8.exe
Size 286KB
Sample240711-dblaqavekr
SHA256 a93a0b125c19135c7a7def5d8fe1219885e61a45f0b962103e726086179b35b8
MD5 813692b800efaef1e1e187d80c7aca73
SHA1 04b87256634a7a877cdb59b123cdf9cc1f27bec1
SHA512 249639297193bec731b869321f1ebdde83e565d852213d7721d114c47c76a3d7dabd630e0256cbc88d2e146b79a581c5961152250a6481e812794999bf1e428b
SSDEEP 3072:6j2ezmdZM+YPap7ravoUH5q823JRrQ482F1FQDPQthg:o2DMxMyH5q82nrQ4820PQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a93a0b125c19135c7a7def5d8fe1219885e61a45f0b962103e726086179b35b8.exe

File Explorer

a93a0b125c19135c7a7def5d8fe1219885e61a45f0b962103e726086179b35b8.exe

.exe 286KB

a93a0b125c19135c7a7def5d8fe1219885e61a45f0b962103e726086179b35b8.exe

IMPHASH 2064d989b46897bf524f52a4d16e3dc0
SHA256 a93a0b125c19135c7a7def5d8fe1219885e61a45f0b962103e726086179b35b8
MD5 813692b800efaef1e1e187d80c7aca73
SHA1 04b87256634a7a877cdb59b123cdf9cc1f27bec1
SHA512 249639297193bec731b869321f1ebdde83e565d852213d7721d114c47c76a3d7dabd630e0256cbc88d2e146b79a581c5961152250a6481e812794999bf1e428b
SSDEEP 3072:6j2ezmdZM+YPap7ravoUH5q823JRrQ482F1FQDPQthg:o2DMxMyH5q82nrQ4820PQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8679

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AllocConsole CommConfigDialogA SetEndOfFile FindResourceW LocalCompact WriteConsoleInputA GetProcessPriorityBoost GetWindowsDirectoryA LoadLibraryW CreateEventA GetModuleFileNameW GetACP ReplaceFileA CreateDirectoryA GetLastError SetLastError GetProcAddress IsBadStringPtrW LoadLibraryA CreateFileMappingA LocalAlloc AddVectoredExceptionHandler GlobalFindAtomW EnumResourceTypesW GetWindowsDirectoryW SetFileAttributesW RaiseException HeapReAlloc GetStringTypeW MultiByteToWideChar LCMapStringW CreateFileA GlobalFree GetDateFormatW HeapSize RtlUnwind Sleep IsValidCodePage GetOEMCP HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle HeapCreate EncodePointer HeapFree SetUnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo

user32

GetKeyboardLayoutNameA SetMessageExtraInfo GetCaretPos CharUpperBuffA GetClassInfoW InsertMenuItemW ShowCursor

advapi32

CopySid ClearEventLogA

ole32

CoSuspendClassObjects CoUnmarshalHresult

winhttp

WinHttpOpen