a5f35b4f8933e0106c7743eaadbd3b883f61552add7ff17aca237450b3aa4168[.]exe

General

Target
a5f35b4f8933e0106c7743eaadbd3b883f61552add7ff17aca237450b3aa4168.exe
Size 268KB
Sample240727-b8kdkssclc
SHA256 a5f35b4f8933e0106c7743eaadbd3b883f61552add7ff17aca237450b3aa4168
MD5 6c2830c79d0a840f479ad635e3d57883
SHA1 dc4073381a79705a4df53048cad7b44679623835
SHA512 0a17899c829495dddf3d08a832c7e2b4747ab9665089a9d6b8d5bb625e4851e885800cb242241740853f9e5ad30449f710edd231865c49d464a7aa3084aedc91
SSDEEP 3072:66kSFokrBF+7cvxpl1oZkNYe/v4IMbGhULweRQvybL2RxTTu:jzfrK+Dl1ou2HtmaLgxTT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5f35b4f8933e0106c7743eaadbd3b883f61552add7ff17aca237450b3aa4168.exe

File Explorer

a5f35b4f8933e0106c7743eaadbd3b883f61552add7ff17aca237450b3aa4168.exe

.exe 268KB

a5f35b4f8933e0106c7743eaadbd3b883f61552add7ff17aca237450b3aa4168.exe

IMPHASH 3ee3964629fff7decd6eee12d8b20149
SHA256 a5f35b4f8933e0106c7743eaadbd3b883f61552add7ff17aca237450b3aa4168
MD5 6c2830c79d0a840f479ad635e3d57883
SHA1 dc4073381a79705a4df53048cad7b44679623835
SHA512 0a17899c829495dddf3d08a832c7e2b4747ab9665089a9d6b8d5bb625e4851e885800cb242241740853f9e5ad30449f710edd231865c49d464a7aa3084aedc91
SSDEEP 3072:66kSFokrBF+7cvxpl1oZkNYe/v4IMbGhULweRQvybL2RxTTu:jzfrK+Dl1ou2HtmaLgxTT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile LocalCompact GlobalLock CreateHardLinkA GetModuleHandleW CreateNamedPipeW GetProcessHeap GetConsoleCP GlobalAlloc GetSystemDirectoryW LoadLibraryW IsProcessInJob AssignProcessToJobObject CreateEventA CreateJobObjectA GetConsoleAliasesW GetLastError SetLastError GetProcAddress PeekConsoleInputW EnumDateFormatsExA VerLanguageNameW IsBadHugeReadPtr SetConsoleCtrlHandler AddAtomW HeapWalk EnumResourceTypesW SetEnvironmentVariableA GetModuleFileNameA GetOEMCP EnumResourceNamesA GetFileTime FatalAppExitA SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExA LCMapStringW CreateFileW CloseHandle WriteConsoleW FlushFileBuffers HeapReAlloc FindFirstVolumeMountPointW CreateFileA HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW ReadFile MultiByteToWideChar SetFilePointer FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW Sleep GetConsoleMode RtlUnwind SetStdHandle HeapSize

user32

CharUpperBuffW GetMessageExtraInfo DrawStateW SetMenu GetSysColorBrush SetCaretPos SetClipboardViewer

advapi32

RegSetValueA

Sharing