a6e9ff0ac5802746d0033499a2ea05c0N[.]exe

General

Target
a6e9ff0ac5802746d0033499a2ea05c0N.exe
Size 536KB
Sample240827-j5pg5asgrr
SHA256 e28f4be9b30b89b1ecdb67ffaa7f8e5bef97721d3987dc15d0c50b12492d8441
MD5 a6e9ff0ac5802746d0033499a2ea05c0
SHA1 8f5549e1830bcfffcd0c48f92ab42a4842165305
SHA512 28526dae0f04bade085b7a454847adef7f4188c6a1f3e0121153f46eafeb1d10c1174dad43f3244685e94ab447083941212563126ce0ab8cdd8ef89f0710424d
SSDEEP 12288:DuONeZuOSMY3ob+Pxe8SgUEREOJt1c4tyV:KOyk3xe8Sj+EafO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6e9ff0ac5802746d0033499a2ea05c0N.exe

File Explorer

a6e9ff0ac5802746d0033499a2ea05c0N.exe

.exe 536KB

a6e9ff0ac5802746d0033499a2ea05c0N.exe

IMPHASH a8e039f6ffeb05815a04e81d73607108
SHA256 e28f4be9b30b89b1ecdb67ffaa7f8e5bef97721d3987dc15d0c50b12492d8441
MD5 a6e9ff0ac5802746d0033499a2ea05c0
SHA1 8f5549e1830bcfffcd0c48f92ab42a4842165305
SHA512 28526dae0f04bade085b7a454847adef7f4188c6a1f3e0121153f46eafeb1d10c1174dad43f3244685e94ab447083941212563126ce0ab8cdd8ef89f0710424d
SSDEEP 12288:DuONeZuOSMY3ob+Pxe8SgUEREOJt1c4tyV:KOyk3xe8Sj+EafO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mipu\dowi gudavidafi\riy\hex\miwe\dewaceg\puzic bah.pdb

kernel32

GetFileSize GlobalDeleteAtom SetFilePointer lstrlenA TlsGetValue GetConsoleAliasExesA SetLocalTime CommConfigDialogA FreeLibrary InterlockedDecrement SetFirmwareEnvironmentVariableA CreateDirectoryW GetComputerNameW SetTapeParameters GetProcessPriorityBoost GetTickCount CreateNamedPipeW GetConsoleAliasesLengthA GetPrivateProfileStringW WriteFile FindActCtxSectionStringA EnumTimeFormatsW CreateDirectoryExW ActivateActCtx GlobalAlloc GetSystemDirectoryW LoadLibraryW GetConsoleMode SetCommConfig _hread GetSystemWow64DirectoryW SetSystemTimeAdjustment GetSystemWindowsDirectoryA GetVersionExW GlobalFlags ReadFile GetBinaryTypeW GetOverlappedResult CompareStringW ExitThread SetConsoleTitleA GlobalUnlock DeactivateActCtx GetNamedPipeHandleStateW VerifyVersionInfoW ReleaseActCtx GetStartupInfoA GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcessHeaps GetComputerNameExW SetStdHandle FreeUserPhysicalPages SetComputerNameA VerLanguageNameW GetAtomNameA LoadLibraryA Process32FirstW CreateSemaphoreW SetCalendarInfoW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW VirtualLock SetConsoleWindowInfo FindAtomA WriteProfileStringA QueryMemoryResourceNotification FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetCPInfoExA SetProcessShutdownParameters _lopen TlsAlloc GetWindowsDirectoryW GetVersion GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetProfileSectionW LCMapStringW CopyFileExA DeleteFileA FlushFileBuffers GetLastError WideCharToMultiByte GetStartupInfoW HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage GetProcAddress GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree SetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

user32

GetMenuInfo GetListBoxInfo

Sharing