446c3fefee0e304b40519eb668485e5c5cce65c90a02fd40a131898d4ca23f72[.]exe

General

Target
446c3fefee0e304b40519eb668485e5c5cce65c90a02fd40a131898d4ca23f72.exe
Size 308KB
Sample240726-df88cavhle
SHA256 446c3fefee0e304b40519eb668485e5c5cce65c90a02fd40a131898d4ca23f72
MD5 a62875de9ddb7d679bcb73d5db7ccf3d
SHA1 8a298d641fbe9fc7f0b9257bd0c3df58ce771f91
SHA512 78cd920ea142ec6af2d1605f20aaa948efdcbcf201d4f9d7e45fe61c36b8d526b6f8ad3d3411c4ace315d3c0c8a945c5e9cd05f2492902e9b8194f9fe80f4dd1
SSDEEP 6144:YZ5fh1s4mex2OO8bAiZ0YDChe8UN5alW6jx+Z:85frs4f2OOm/Ao8UNglGZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
446c3fefee0e304b40519eb668485e5c5cce65c90a02fd40a131898d4ca23f72.exe

File Explorer

446c3fefee0e304b40519eb668485e5c5cce65c90a02fd40a131898d4ca23f72.exe

.exe 308KB

446c3fefee0e304b40519eb668485e5c5cce65c90a02fd40a131898d4ca23f72.exe

IMPHASH 3f875ad300fc349e53363f89de2d25fd
SHA256 446c3fefee0e304b40519eb668485e5c5cce65c90a02fd40a131898d4ca23f72
MD5 a62875de9ddb7d679bcb73d5db7ccf3d
SHA1 8a298d641fbe9fc7f0b9257bd0c3df58ce771f91
SHA512 78cd920ea142ec6af2d1605f20aaa948efdcbcf201d4f9d7e45fe61c36b8d526b6f8ad3d3411c4ace315d3c0c8a945c5e9cd05f2492902e9b8194f9fe80f4dd1
SSDEEP 6144:YZ5fh1s4mex2OO8bAiZ0YDChe8UN5alW6jx+Z:85frs4f2OOm/Ao8UNglGZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW LoadLibraryW SetSystemTimeAdjustment GetCPInfoExW GetLastError GetProcAddress LocalAlloc HeapSetInformation LocalSize FindAtomW FindActCtxSectionStringW GetConsoleSelectionInfo GetCommandLineA GetStartupInfoW DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree Sleep FatalAppExitA RtlUnwind RaiseException SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW HeapAlloc HeapReAlloc FlushFileBuffers HeapSize CreateFileW CloseHandle GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale

Name

.text

Size

95KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

7.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.htext

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

446c3fefee0e304b40519eb668485e5c5cce65c90a02fd40a131898d4ca23f72.exe

kernel32

generic