0F8D2648166184BDE6562F33B7E4B620313FE7A21746720D37594213FBA7A604[.]exe

General

Target
0F8D2648166184BDE6562F33B7E4B620313FE7A21746720D37594213FBA7A604.exe
Size 1.1MB
Sample240724-nest3stdpj
SHA256 ef5c8d37fe7ad48a47e8127a1e3935fde4a37c0295d7b547ef067d97ea999434
MD5 16d76956de4e24c0067278a8c3a8e2dd
SHA1 97a0a15c115ca7bd993df204117ff4d3a463c5a5
SHA512 41e7c87cbcd239f430557185fe0390c100aed95fbd0e70dd36755123d23930f90e31ef5b8aa9bc0ec8237b8a6af2e0fa922ae67e39dcf5077795e105a7829331
SSDEEP 12288:dpKrcz9GQmikzLgiaYb0ZPzxwbwgyScsWMifc0FrdbH7+esjQajwROmBVe3Rac26:rAcz9EikngXP6NB8cyz73OH6k86
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0F8D2648166184BDE6562F33B7E4B620313FE7A21746720D37594213FBA7A604.exe

File Explorer

0F8D2648166184BDE6562F33B7E4B620313FE7A21746720D37594213FBA7A604.exe

.exe 1.1MB

0F8D2648166184BDE6562F33B7E4B620313FE7A21746720D37594213FBA7A604.exe

IMPHASH 1690f0efc188c620ac36940e114b98ae
SHA256 ef5c8d37fe7ad48a47e8127a1e3935fde4a37c0295d7b547ef067d97ea999434
MD5 16d76956de4e24c0067278a8c3a8e2dd
SHA1 97a0a15c115ca7bd993df204117ff4d3a463c5a5
SHA512 41e7c87cbcd239f430557185fe0390c100aed95fbd0e70dd36755123d23930f90e31ef5b8aa9bc0ec8237b8a6af2e0fa922ae67e39dcf5077795e105a7829331
SSDEEP 12288:dpKrcz9GQmikzLgiaYb0ZPzxwbwgyScsWMifc0FrdbH7+esjQajwROmBVe3Rac26:rAcz9EikngXP6NB8cyz73OH6k86
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

2285568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cojarerivayez\mubuni-lef73\red_bisafebodoj\kigij-sitekazomi c.pdb

kernel32

WriteConsoleOutputCharacterW GetProcessIoCounters ReadConsoleA SetMailslotInfo FreeEnvironmentStringsA GetConsoleAliasesLengthA GetConsoleTitleA InitializeCriticalSection WriteConsoleW GetBinaryTypeA ReplaceFileW lstrlenW CreateDirectoryA GetConsoleAliasesW GetCPInfoExW GetLastError GetProcAddress FindFirstChangeNotificationW MoveFileW WriteProfileSectionA SetStdHandle EnterCriticalSection GlobalFree LoadLibraryA WriteConsoleA SetConsoleWindowInfo GetModuleHandleA VirtualProtect SetCalendarInfoA UnregisterWaitEx InterlockedPushEntrySList VirtualAlloc FillConsoleOutputCharacterA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount GetLocaleInfoW

Sharing