27ca44d4fca5a29c0018efeebbda04250739a546e4b7879bd5a547aaea1de80d[.]exe

General

Target
27ca44d4fca5a29c0018efeebbda04250739a546e4b7879bd5a547aaea1de80d.exe
Size 415KB
Sample240922-bgnxpavbkj
SHA256 27ca44d4fca5a29c0018efeebbda04250739a546e4b7879bd5a547aaea1de80d
MD5 1c5083792acfccf5d90db80884569ace
SHA1 6be243663a2d173dcd728146f2a3d1a5a974ff38
SHA512 8af309adcaed0055ca8b2c879a1ff16e9d0d853ab3837c94719d09c03bf27b32125581f525ef99caa4488b184bfc5565b033333cd4af9e4240aa23963dd76a1b
SSDEEP 6144:+nhYTBI6ONsWWqOaejSlD8viNV43Km3Wlz8+5FXCnFk:2aTy6OlO3GDyYnSC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ca44d4fca5a29c0018efeebbda04250739a546e4b7879bd5a547aaea1de80d.exe

File Explorer

27ca44d4fca5a29c0018efeebbda04250739a546e4b7879bd5a547aaea1de80d.exe

.exe 415KB

27ca44d4fca5a29c0018efeebbda04250739a546e4b7879bd5a547aaea1de80d.exe

IMPHASH aa1df04aa31b8b76e6674a21e4ac0295
SHA256 27ca44d4fca5a29c0018efeebbda04250739a546e4b7879bd5a547aaea1de80d
MD5 1c5083792acfccf5d90db80884569ace
SHA1 6be243663a2d173dcd728146f2a3d1a5a974ff38
SHA512 8af309adcaed0055ca8b2c879a1ff16e9d0d853ab3837c94719d09c03bf27b32125581f525ef99caa4488b184bfc5565b033333cd4af9e4240aa23963dd76a1b
SSDEEP 6144:+nhYTBI6ONsWWqOaejSlD8viNV43Km3Wlz8+5FXCnFk:2aTy6OlO3GDyYnSC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16543

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetCurrentProcess InterlockedCompareExchange SetVolumeMountPointW CreateHardLinkA GetModuleHandleW CreateNamedPipeW EnumCalendarInfoExW GetNumberFormatA CreateActCtxW TlsSetValue LoadLibraryW GetLocaleInfoW GetCalendarInfoA CreateEventA GetFileAttributesA GetTimeFormatW GetModuleFileNameW FindNextVolumeMountPointW GetTempPathW GetShortPathNameA CreateJobObjectA VerifyVersionInfoW InterlockedExchange GlobalUnfix GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW GetProcAddress GetLongPathNameA PeekConsoleInputW EnumSystemCodePagesW GetConsoleDisplayMode SetComputerNameA GetCommState GetProcessVersion SetThreadPriorityBoost InterlockedExchangeAdd CreateFileMappingA LocalAlloc GetFileType FoldStringW SetEnvironmentVariableA EnumDateFormatsA GetProcessShutdownParameters LoadLibraryExA VirtualProtect GetFileTime WaitForDebugEvent OpenEventW SetFileShortNameA GetVersionExA GetDiskFreeSpaceExW GetWindowsDirectoryW LocalFree LCMapStringW CommConfigDialogW CloseHandle GetStringTypeW CreateFileW IsProcessorFeaturePresent MultiByteToWideChar WriteConsoleW InterlockedIncrement GetConsoleAliasExesLengthA SetEndOfFile GetConsoleAliasExesA EnumCalendarInfoA GlobalMemoryStatus LoadModule SetDefaultCommConfigA SetStdHandle FlushFileBuffers HeapAlloc HeapReAlloc ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess WriteFile HeapCreate HeapFree TlsAlloc TlsGetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize

user32

DrawStateA SetCaretPos LoadMenuA CharUpperA GetMenu InsertMenuItemW GetWindowLongW GetSysColor GetMenuStringA

gdi32

GetBkMode GetCharWidthFloatA CreateDCA GetCharWidth32A GetTextMetricsA GetTextCharset GetCharWidthI

winhttp

WinHttpConnect

Sharing