fd8a6e089ea297e8d8e95e36d0018e5f[.]exe

General

Target
fd8a6e089ea297e8d8e95e36d0018e5f.exe
Size 408KB
Sample240925-njt8psseqn
SHA256 2cef6d9917bbccdc5ffffbf7b687da70e673f3a5dc6923c715e4fc50e0115e17
MD5 fd8a6e089ea297e8d8e95e36d0018e5f
SHA1 c78fc7b22cf98ae5870d4feff2013f7607a655f9
SHA512 ec1bbca3fa9c297a3ae5b73a201905bb16ee63ae92ce1a461181a9f738728fd9018ab54dbddb700f3683463a6beac4d3f2d1012af3ba6f3cfae12406eaa5525b
SSDEEP 6144:jzpmEfjaW3XPpwwR76YEwKHU3BBrOgYvBqurS2T6:3pm+jaW3XPB7LxVO1vwu2J
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd8a6e089ea297e8d8e95e36d0018e5f.exe

File Explorer

fd8a6e089ea297e8d8e95e36d0018e5f.exe

.exe 408KB

fd8a6e089ea297e8d8e95e36d0018e5f.exe

IMPHASH a11cbe8ba3528a436618e8dc32e663a6
SHA256 2cef6d9917bbccdc5ffffbf7b687da70e673f3a5dc6923c715e4fc50e0115e17
MD5 fd8a6e089ea297e8d8e95e36d0018e5f
SHA1 c78fc7b22cf98ae5870d4feff2013f7607a655f9
SHA512 ec1bbca3fa9c297a3ae5b73a201905bb16ee63ae92ce1a461181a9f738728fd9018ab54dbddb700f3683463a6beac4d3f2d1012af3ba6f3cfae12406eaa5525b
SSDEEP 6144:jzpmEfjaW3XPpwwR76YEwKHU3BBrOgYvBqurS2T6:3pm+jaW3XPB7LxVO1vwu2J
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW CreateJobObjectW SetComputerNameW CreateHardLinkA GetModuleHandleW EnumCalendarInfoExW GetNumberFormatA GetWindowsDirectoryA SetCommState LoadLibraryW GetLocaleInfoW ReadConsoleInputA GetCalendarInfoW CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetVersionExW GetFileAttributesA EnumSystemCodePagesA GetTimeFormatW GetModuleFileNameW CreateActCtxA GetEnvironmentVariableA SetThreadPriority GetTempPathW VerifyVersionInfoW GlobalUnfix GetStdHandle GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW GetLongPathNameW EnumCalendarInfoW CreateNamedPipeA LoadModule GlobalFree GetProcessVersion LoadLibraryA InterlockedExchangeAdd CreateFileMappingA LocalAlloc SetCalendarInfoW FoldStringA EnumDateFormatsA GlobalUnWire GetProcessShutdownParameters LoadLibraryExA GetFileTime WaitForDebugEvent OpenEventW GetShortPathNameW SetFileShortNameA GetDiskFreeSpaceExW LCMapStringW CommConfigDialogW ReadFile GetProcessHeap SetEndOfFile GetStringTypeW MultiByteToWideChar CreateFileW WriteConsoleW InterlockedIncrement GetConsoleAliasExesA TlsGetValue SetFilePointer GetProcAddress SetDefaultCommConfigA FlushFileBuffers SetStdHandle HeapFree EncodePointer DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess HeapCreate Sleep HeapSize ExitProcess RtlUnwind HeapAlloc WriteFile FreeEnvironmentStringsW GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA

user32

GetWindowLongW SetCaretPos CharUpperA InsertMenuItemW DrawStateA LoadMenuA CharLowerBuffA GetSysColor GetMenuStringA SetMenu

gdi32

GetBkMode CreateDCW GetCharWidth32W GetTextCharset GetCharWidthI

winhttp

WinHttpCloseHandle

Sharing