e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d[.]exe

General

Target
e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d.exe
Size 247KB
Sample240725-hc2rbatekn
SHA256 e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d
MD5 e80a1d9a248c337a5d95f09776c0b092
SHA1 4585f99e00ce0068f9a40893b4741b5151066173
SHA512 3c42c682236638a61d3ec6323fc633eb92eab9118e589ab012d407231069b974232d36bfa823dce6f9d24e618cd68fc9ac95b541966d6a4562a3d40b3dc5c04a
SSDEEP 3072:xrRbOKH6aSZYEGhm0OWh5bSpEC2lrGCH:x1OWSZYlOWfSpENo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d.exe

File Explorer

e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d.exe

.exe 247KB

e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d.exe

IMPHASH a945bbba5e19a9f29aa1458bdc91ed8a
SHA256 e77eb0d03b445cf74f20c2614b1135b62da61ecf0d7c48194b71b8f73297272d
MD5 e80a1d9a248c337a5d95f09776c0b092
SHA1 4585f99e00ce0068f9a40893b4741b5151066173
SHA512 3c42c682236638a61d3ec6323fc633eb92eab9118e589ab012d407231069b974232d36bfa823dce6f9d24e618cd68fc9ac95b541966d6a4562a3d40b3dc5c04a
SSDEEP 3072:xrRbOKH6aSZYEGhm0OWh5bSpEC2lrGCH:x1OWSZYlOWfSpENo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

507904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\widuza.pdb

kernel32

GetProcessIoCounters SetMailslotInfo CreateDirectoryW GetConsoleAliasesA GetConsoleTitleA ReadConsoleW WriteConsoleW GetBinaryTypeW ReplaceFileA CreateDirectoryA GetStdHandle GetCPInfoExW GetLastError GetProcAddress VirtualAlloc GetConsoleAliasesLengthW MoveFileW WriteProfileSectionA EnterCriticalSection GlobalFree LoadLibraryA WriteConsoleA SetConsoleWindowInfo GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect SetCalendarInfoA InterlockedPushEntrySList lstrlenA UnregisterWait HeapFree GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

advapi32

CloseEventLog

Sharing