985ed5f2c06b8e5059da6e875b337270N[.]exe

General

Target
985ed5f2c06b8e5059da6e875b337270N.exe
Size 989KB
Sample240906-js9mjavglc
SHA256 3d0bf411eff0c512f6444e5dc2f7d604c8ccdf79795dd0d811d99a547d8d4d45
MD5 985ed5f2c06b8e5059da6e875b337270
SHA1 eaeb2b961b13825afa16b3b5cd8445cb1dd34d65
SHA512 a42ee5977909e3d4a9436ba376661329829d20617aff5894e10bde8043cdaeabc3290c96bd1eb796cb5ffdd7b67f0be44d7ad53e5c0cf63fc3fc4eb7876c9399
SSDEEP 24576:tW+wsDaQw6DNz3qRyPnmGfrnvVUKueYkRmneWtJDrEH7f:tasY6DOOBfrnvV74eWtI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
985ed5f2c06b8e5059da6e875b337270N.exe

File Explorer

985ed5f2c06b8e5059da6e875b337270N.exe

.dll 989KB

985ed5f2c06b8e5059da6e875b337270N.exe

IMPHASH 71fc45db7a81ce236f432a828a4e8fcd
SHA256 3d0bf411eff0c512f6444e5dc2f7d604c8ccdf79795dd0d811d99a547d8d4d45
MD5 985ed5f2c06b8e5059da6e875b337270
SHA1 eaeb2b961b13825afa16b3b5cd8445cb1dd34d65
SHA512 a42ee5977909e3d4a9436ba376661329829d20617aff5894e10bde8043cdaeabc3290c96bd1eb796cb5ffdd7b67f0be44d7ad53e5c0cf63fc3fc4eb7876c9399
SSDEEP 24576:tW+wsDaQw6DNz3qRyPnmGfrnvVUKueYkRmneWtJDrEH7f:tasY6DOOBfrnvV74eWtI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

634247

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

oleaut32

SysAllocString VariantClear VariantCopy SysFreeString SysAllocStringByteLen

user32

CharLowerW CharUpperA CharNextA CharPrevExA CharUpperW CharLowerA

msvcrt

_adjust_fdiv _initterm ?terminate@@YAXXZ _onexit __dllonexit ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset strcmp realloc memcmp _purecall strlen free malloc memmove _CxxThrowException memcpy __CxxFrameHandler

kernel32

InitializeCriticalSection ReleaseSemaphore CreateSemaphoreA ResetEvent SetEvent CreateEventA WaitForSingleObject VirtualFree VirtualAlloc GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter FileTimeToLocalFileTime DeleteCriticalSection LocalFileTimeToFileTime GetVersionExA WaitForMultipleObjects EnterCriticalSection LeaveCriticalSection GetSystemTime SystemTimeToFileTime FileTimeToDosDateTime DosDateTimeToFileTime GetModuleHandleA GetProcAddress GetSystemInfo CompareFileTime WriteFile ReadFile MultiByteToWideChar WideCharToMultiByte GetLastError CloseHandle SetFileAttributesA DeleteFileA GetTempPathA GetTempFileNameA CreateFileA

Name

.text

Size

654KB

Virtual Size

654KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

95KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

985ed5f2c06b8e5059da6e875b337270N.exe

oleaut32

user32

msvcrt

kernel32

generic