ee83fed4193c74b9726be2372212a536[.]exe

General

Target
ee83fed4193c74b9726be2372212a536.exe
Size 214KB
Sample240925-gnlc2ayenp
SHA256 f06fca211f3ee54ebd6f7c25820901219592e0736be09a260ae774f6806376bd
MD5 ee83fed4193c74b9726be2372212a536
SHA1 057d11d83e96c5332b090ee500d10e2e617c1434
SHA512 d802ea21dd6ce7e8fb7c9ef3d9b22689550a59bc92f6e68ff8dd495cf1887286904dceef4385632eeda060430cfa09abe111dcbe0c51fdde2457b8bbec59c780
SSDEEP 3072:ZOFL8HNl8bopbq1OjM5HA/qabpk3r+XdabhYesl5f1:aLqNl0opekjMBAxbpg+GhYF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee83fed4193c74b9726be2372212a536.exe

File Explorer

ee83fed4193c74b9726be2372212a536.exe

.exe 214KB

ee83fed4193c74b9726be2372212a536.exe

IMPHASH 48018783cf28f3141db6304599edb5a2
SHA256 f06fca211f3ee54ebd6f7c25820901219592e0736be09a260ae774f6806376bd
MD5 ee83fed4193c74b9726be2372212a536
SHA1 057d11d83e96c5332b090ee500d10e2e617c1434
SHA512 d802ea21dd6ce7e8fb7c9ef3d9b22689550a59bc92f6e68ff8dd495cf1887286904dceef4385632eeda060430cfa09abe111dcbe0c51fdde2457b8bbec59c780
SSDEEP 3072:ZOFL8HNl8bopbq1OjM5HA/qabpk3r+XdabhYesl5f1:aLqNl0opekjMBAxbpg+GhYF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5961

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GetFullPathNameA GetNumaProcessorNode GetProcessIoCounters OpenJobObjectA UnlockFile GetTimeFormatA GetModuleHandleW GetTickCount GetDateFormatA GetSystemTimes GlobalAlloc LoadLibraryW FormatMessageW InitAtomTable HeapCreate FlushInstructionCache GetProcAddress GetNumaHighestNodeNumber GetAtomNameA LoadLibraryA InterlockedExchangeAdd SetCalendarInfoW VirtualLock HeapLock GetCommMask GetCurrentConsoleFont SetCommMask FoldStringA lstrcatW FreeEnvironmentStringsW VirtualProtect EnumDateFormatsW SetFileShortNameA DebugBreak GetModuleHandleA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle RaiseException

user32

InflateRect GetActiveWindow LoadIconA

Sharing