11eb08d4313711c1753029776d19d11eaabba4af381b456ccc405cd1d5784752[.]exe

General

Target
11eb08d4313711c1753029776d19d11eaabba4af381b456ccc405cd1d5784752.exe
Size 333KB
Sample240802-bqjpbssajf
SHA256 11eb08d4313711c1753029776d19d11eaabba4af381b456ccc405cd1d5784752
MD5 2edc069ff3ad923a690b87b479a5730b
SHA1 6a2b61caaee1a01e07600733817b0fd246df0aef
SHA512 09d0e3eac70c16085e95afaa12e72a34e084b33b3a3d77fecf075213aaaa8000b80bc210627b9e538b96ddc1f289bc0c3039025d7638600d41c60833ce72bea6
SSDEEP 6144:wYm5SAxmMS6Ywg6KaCMlAm3LGnLiXKZJd+p3ohpNEx:wYaSSFjg6KaFAFXyoJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11eb08d4313711c1753029776d19d11eaabba4af381b456ccc405cd1d5784752.exe

File Explorer

11eb08d4313711c1753029776d19d11eaabba4af381b456ccc405cd1d5784752.exe

.exe 333KB

11eb08d4313711c1753029776d19d11eaabba4af381b456ccc405cd1d5784752.exe

IMPHASH 44607e735c962183ec1fe579ca4c8317
SHA256 11eb08d4313711c1753029776d19d11eaabba4af381b456ccc405cd1d5784752
MD5 2edc069ff3ad923a690b87b479a5730b
SHA1 6a2b61caaee1a01e07600733817b0fd246df0aef
SHA512 09d0e3eac70c16085e95afaa12e72a34e084b33b3a3d77fecf075213aaaa8000b80bc210627b9e538b96ddc1f289bc0c3039025d7638600d41c60833ce72bea6
SSDEEP 6144:wYm5SAxmMS6Ywg6KaCMlAm3LGnLiXKZJd+p3ohpNEx:wYaSSFjg6KaFAFXyoJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

44752

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

ShowWindow

kernel32

TlsSetValue SetEndOfFile Sleep GetConsoleWindow LoadLibraryA GetProcAddress WriteConsoleW CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EncodePointer DecodePointer InitializeCriticalSectionEx MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError TlsAlloc TlsGetValue RtlUnwind TlsFree FreeLibrary LoadLibraryExW GetCurrentProcess TerminateProcess ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW FlushFileBuffers FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapReAlloc HeapSize CreateFileW

Sharing