69ca88f8efc68ef7d3bb27e94de4bd5ba742104299895dae9ae88ad1b827cdfb[.]exe

General

Target
69ca88f8efc68ef7d3bb27e94de4bd5ba742104299895dae9ae88ad1b827cdfb.exe
Size 807KB
Sample240724-ss2flawcmb
SHA256 06388962bb9c2499117a658ac496d9bcc76e29cf560f551fef971996f037327a
MD5 6dbbf4219ef0f8f36ddc3ca4cccc87ba
SHA1 3e28977bcc084ce28666e8cb04139f2d6d3e1545
SHA512 5d4ee1617f950f7096cdb7fa7ac716e1d6260a38b0430ae04a0fa339149ea6202191bae04f26f88442057982c955b0c6e9aeec0a475f8a63efefebf68ad44199
SSDEEP 12288:GLCb/6Ug0ENEj9kVFrfzc0NQTljXq7+efBcNiS4t0ggvFXH9p:GLCbCUMVFrfq5ayef4iSCEXH9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69ca88f8efc68ef7d3bb27e94de4bd5ba742104299895dae9ae88ad1b827cdfb.exe

File Explorer

69ca88f8efc68ef7d3bb27e94de4bd5ba742104299895dae9ae88ad1b827cdfb.exe

.exe 807KB

69ca88f8efc68ef7d3bb27e94de4bd5ba742104299895dae9ae88ad1b827cdfb.exe

IMPHASH 34cea30965227a9e1529d56ad65c3327
SHA256 06388962bb9c2499117a658ac496d9bcc76e29cf560f551fef971996f037327a
MD5 6dbbf4219ef0f8f36ddc3ca4cccc87ba
SHA1 3e28977bcc084ce28666e8cb04139f2d6d3e1545
SHA512 5d4ee1617f950f7096cdb7fa7ac716e1d6260a38b0430ae04a0fa339149ea6202191bae04f26f88442057982c955b0c6e9aeec0a475f8a63efefebf68ad44199
SSDEEP 12288:GLCb/6Ug0ENEj9kVFrfzc0NQTljXq7+efBcNiS4t0ggvFXH9p:GLCbCUMVFrfq5ayef4iSCEXH9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

831488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mizih-100\nufogucig46_nab\rirezoda\64\hegom_geso.pdb

kernel32

LoadLibraryA GetModuleHandleA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeA SetVolumeMountPointA SetSystemTimeAdjustment FindNextFileW EnumResourceTypesA GetModuleFileNameW IsBadCodePtr LoadLibraryW DeleteFileW SearchPathA VirtualAlloc WriteConsoleOutputCharacterW GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringW PeekConsoleInputW GlobalGetAtomNameA GetProcAddress GetUserDefaultLangID GetConsoleAliasW FindFirstChangeNotificationW GetFileType SetFileShortNameA lstrcpynA AddAtomA SetConsoleCtrlHandler CreateMutexA GetLongPathNameA FoldStringW OpenWaitableTimerA ResetEvent GlobalWire GetComputerNameA GetVersionExW GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetCalendarInfoW SetComputerNameA GetFileAttributesA GetVolumePathNameW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

Sharing