437364cb16aa12369150cb5d035e3490N[.]exe

General

Target
437364cb16aa12369150cb5d035e3490N.exe
Size 240KB
Sample240722-cefc7sxejp
SHA256 2b2b2556e72aeb0bb0526c762e6331fe06cfb5e88b26a934fae67349870ab1b0
MD5 437364cb16aa12369150cb5d035e3490
SHA1 d2bfdc91719d02e299755db82bf53ee9f6a3168e
SHA512 1b6a86712b499dd05ec9a88da76157a51cab380bdf2ab568de04b344ce3582da5568228a80326fd973f149fd41c67ef7ae7ca08b6408791942aa02027d7cafbb
SSDEEP 6144:cWTD+VutBb19pEBRgKJzIpYCIEGw8GNzeDW:96YZpE/cLGw8pW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
437364cb16aa12369150cb5d035e3490N.exe

File Explorer

437364cb16aa12369150cb5d035e3490N.exe

.exe 240KB

437364cb16aa12369150cb5d035e3490N.exe

IMPHASH 9fa45476e477c6919d1122378d8053e3
SHA256 2b2b2556e72aeb0bb0526c762e6331fe06cfb5e88b26a934fae67349870ab1b0
MD5 437364cb16aa12369150cb5d035e3490
SHA1 d2bfdc91719d02e299755db82bf53ee9f6a3168e
SHA512 1b6a86712b499dd05ec9a88da76157a51cab380bdf2ab568de04b344ce3582da5568228a80326fd973f149fd41c67ef7ae7ca08b6408791942aa02027d7cafbb
SSDEEP 6144:cWTD+VutBb19pEBRgKJzIpYCIEGw8GNzeDW:96YZpE/cLGw8pW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile LocalCompact CreateHardLinkA GetModuleHandleW GetProcessHeap EnumResourceTypesA GlobalAlloc GetSystemDirectoryW LoadLibraryW IsProcessInJob AssignProcessToJobObject IsBadWritePtr GetLastError SetLastError GetProcAddress IsBadHugeWritePtr VerLanguageNameA FindClose LoadLibraryA SetConsoleCtrlHandler AddAtomW CreateEventW GlobalHandle GetModuleFileNameA GetOEMCP GlobalUnWire HeapSetInformation EnumResourceNamesA GetCurrentThreadId Module32NextW GetDiskFreeSpaceExA ReadConsoleInputW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer HeapReAlloc WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent HeapCreate ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CreateFileW

user32

ChangeMenuW GetMessageExtraInfo CharUpperBuffA SetCursorPos SetUserObjectSecurity SetCaretPos GetCaretBlinkTime SetClipboardViewer

Name

.text

Size

145KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

47KB

Virtual Size

28.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.befola

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fehiy

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gogizof

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

437364cb16aa12369150cb5d035e3490N.exe

kernel32

user32

generic