sab666[.]exe | Triage™

General

Target
sab666.exe
Size 725KB
Sample240907-elmf7stenj
SHA256 500ccbcd1562c90f659b25d9998198fa89026e352ff0ceed736742ae3d36cede
MD5 049819fc619411de8764e0356c68c8b1
SHA1 8f774101357930a99e4e7edb40724d338e23842b
SHA512 0d97fa952e6d7efe474010e69fd0db93c200b434092ecba30c2b1b169e24d00613f825ebc21717c38dd713a352fdd3a32e485cea59c48892e7ccfd28790c5feb
SSDEEP 12288:8vBvH0CP2jc1i+OxmvqDLHODkGRNxS0wFhqUVcG5NAzRdtXUA1u:8vBv0W+cQ+OxiMCDkQNs096cGfmR8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sab666.exe

File Explorer

sab666.exe

.exe 725KB

sab666.exe

IMPHASH 6f669c93352c2aa8ed257cfd73202b7a
SHA256 500ccbcd1562c90f659b25d9998198fa89026e352ff0ceed736742ae3d36cede
MD5 049819fc619411de8764e0356c68c8b1
SHA1 8f774101357930a99e4e7edb40724d338e23842b
SHA512 0d97fa952e6d7efe474010e69fd0db93c200b434092ecba30c2b1b169e24d00613f825ebc21717c38dd713a352fdd3a32e485cea59c48892e7ccfd28790c5feb
SSDEEP 12288:8vBvH0CP2jc1i+OxmvqDLHODkGRNxS0wFhqUVcG5NAzRdtXUA1u:8vBv0W+cQ+OxiMCDkQNs096cGfmR8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lemetu_capu-jaye\7\jukejekucetad-masiforo36\bijopel.pdb

kernel32

CreateFileW VirtualAlloc GetConsoleAliasW SetComputerNameW GetSystemWindowsDirectoryA GlobalUnlock FindFirstVolumeMountPointW CreateDirectoryExW DeleteAtom GetLogicalDriveStringsA ReadConsoleInputW GetTempPathW GetCurrentDirectoryW DebugBreak LCMapStringA GetProcAddress LocalAlloc GetBinaryTypeA SetThreadUILanguage GetHandleInformation FindNextFileA UnhandledExceptionFilter LoadLibraryW CreateNamedPipeA GetConsoleTitleW GetModuleHandleA CopyFileA CreateActCtxA lstrlenA UpdateResourceW CreateActCtxW DeleteVolumeMountPointA MoveFileWithProgressA CreateMailslotW WriteConsoleInputA GetTempPathA InterlockedExchangeAdd EnumTimeFormatsA FindFirstFileW FreeEnvironmentStringsW VerifyVersionInfoW GlobalAlloc GetTickCount SetLastError GetLastError CopyFileExA CreateFileA SetStdHandle FillConsoleOutputAttribute GetNumberOfConsoleInputEvents CompareStringA GlobalFlags LoadLibraryA WriteConsoleW GetConsoleOutputCP SetUnhandledExceptionFilter DeleteFileA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc HeapReAlloc RtlUnwind InitializeCriticalSectionAndSpinCount MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetCursorInfo GetMenuInfo

gdi32

GetCharWidth32A GetCharABCWidthsA GetColorAdjustment GetBrushOrgEx

winhttp

WinHttpSetOption

Sharing