54E3EE54FAC434E25C03DED56A4680F1EA40A245D657440AC9C51BE7F27EF656[.]exe

General

Target
54E3EE54FAC434E25C03DED56A4680F1EA40A245D657440AC9C51BE7F27EF656.exe
Size 240KB
Sample240724-rtkc2azhpm
SHA256 d372df2f0b72e4bde91c57cb6c5cdd6f39486c68cb5cd26fa3aaf6a403bc0b66
MD5 47915986b5e74a74186547bd87c2fceb
SHA1 7ecf4f720743f9bbf228e122b955eb2c1a868ca0
SHA512 563673143e35a61e80ac44ac5f26190e4e60b7b83df7a2d4895a0f6f8a156e560825267f6f4e9ceb88946ea5ff636d0322800ad978a796177af1bbb8922150c4
SSDEEP 1536:6GKDWND9TgtdAGkDh2lrD0OCsPOcT/X6QEd+KBzmrdVJGF5KBkM45mXtYz3BYHG8:6GKDWHuCbwZRdVJGF5EkJ5mXtYVSGCH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54E3EE54FAC434E25C03DED56A4680F1EA40A245D657440AC9C51BE7F27EF656.exe

File Explorer

54E3EE54FAC434E25C03DED56A4680F1EA40A245D657440AC9C51BE7F27EF656.exe

.exe 240KB

54E3EE54FAC434E25C03DED56A4680F1EA40A245D657440AC9C51BE7F27EF656.exe

IMPHASH ed1b2792ced7a8e7bb849a84d01e5fcb
SHA256 d372df2f0b72e4bde91c57cb6c5cdd6f39486c68cb5cd26fa3aaf6a403bc0b66
MD5 47915986b5e74a74186547bd87c2fceb
SHA1 7ecf4f720743f9bbf228e122b955eb2c1a868ca0
SHA512 563673143e35a61e80ac44ac5f26190e4e60b7b83df7a2d4895a0f6f8a156e560825267f6f4e9ceb88946ea5ff636d0322800ad978a796177af1bbb8922150c4
SSDEEP 1536:6GKDWND9TgtdAGkDh2lrD0OCsPOcT/X6QEd+KBzmrdVJGF5KBkM45mXtYz3BYHG8:6GKDWHuCbwZRdVJGF5EkJ5mXtYVSGCH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

503808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mum\zotedanazical_namit.pdb

kernel32

lstrlenA GetConsoleAliasesLengthW GetProcessIoCounters SetMailslotInfo CreateDirectoryW GetConsoleAliasesA GetConsoleTitleA ReadConsoleW WriteConsoleW GetBinaryTypeW ReplaceFileA CreateDirectoryA GetStdHandle GetCPInfoExW GetLastError SetFilePointer VirtualAlloc MoveFileW WriteProfileSectionA EnterCriticalSection LoadLibraryA WriteConsoleA SetCalendarInfoW SetConsoleWindowInfo GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect InterlockedPushEntrySList GetProcAddress UnregisterWait HeapFree GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

Sharing