dbef01c75b62431ede6a2b2b1e595771c71b4782700094048fc98b86c0e4fbac[.]exe

General

Target
dbef01c75b62431ede6a2b2b1e595771c71b4782700094048fc98b86c0e4fbac.exe
Size 337KB
Sample240928-ccna2atbrf
SHA256 dbef01c75b62431ede6a2b2b1e595771c71b4782700094048fc98b86c0e4fbac
MD5 4ac138770d03156be9e06ae8b15c1db7
SHA1 43b48c74f3add50868ac8fe1272f15373a35ad4b
SHA512 7cd6c64aa080e49511abb33027bef723ccbd21a30e09b05326e25d9d4efb8fa4aee9d1324bf758120ecfead39a9883dd56fe72406048aa259a7afe35b54f397e
SSDEEP 3072:0Rb8x8w8spF105inBx3mTvld6Cge4Nkz7RSx/iQ46oE6Tv6:0Z8Ow8GFC5W3mTvWChzlS41Rm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbef01c75b62431ede6a2b2b1e595771c71b4782700094048fc98b86c0e4fbac.exe

File Explorer

dbef01c75b62431ede6a2b2b1e595771c71b4782700094048fc98b86c0e4fbac.exe

.exe 337KB

dbef01c75b62431ede6a2b2b1e595771c71b4782700094048fc98b86c0e4fbac.exe

IMPHASH e79dd5d8d87cfe6cc9e05d3d783d694e
SHA256 dbef01c75b62431ede6a2b2b1e595771c71b4782700094048fc98b86c0e4fbac
MD5 4ac138770d03156be9e06ae8b15c1db7
SHA1 43b48c74f3add50868ac8fe1272f15373a35ad4b
SHA512 7cd6c64aa080e49511abb33027bef723ccbd21a30e09b05326e25d9d4efb8fa4aee9d1324bf758120ecfead39a9883dd56fe72406048aa259a7afe35b54f397e
SSDEEP 3072:0Rb8x8w8spF105inBx3mTvld6Cge4Nkz7RSx/iQ46oE6Tv6:0Z8Ow8GFC5W3mTvWChzlS41Rm
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

32240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetCurrentProcessId ExitProcess VirtualAlloc VirtualProtect ReadProcessMemory GetModuleFileNameA GetModuleHandleA GetProcAddress LoadResource SizeofResource FindResourceA Toolhelp32ReadProcessMemory GetModuleFileNameW FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetLastError WideCharToMultiByte MultiByteToWideChar RaiseException GetStartupInfoW IsDebuggerPresent InitializeSListHead GetCurrentThreadId IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleW GetSystemTimeAsFileTime DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection Sleep LoadLibraryExW QueryPerformanceFrequency QueryPerformanceCounter

ucrtbase

_get_thread_local_invalid_parameter_handler _get_invalid_parameter_handler terminate _controlfp_s _crt_atexit _register_onexit_function _initialize_onexit_table __p__commode _set_new_mode _configthreadlocale _register_thread_local_exe_atexit_callback _c_exit _cexit _set_fmode _exit exit _initterm_e _initterm _get_narrow_winmain_command_line _initialize_narrow_environment _configure_narrow_argv __setusermatherr _set_app_type _seh_filter_exe malloc _callnewh rand_s _unlock_locales _lock_locales _libm_sse2_sqrt_precise _libm_sse2_sin_precise _libm_sse2_cos_precise __stdio_common_vfprintf __acrt_iob_func free _except_handler4_common __current_exception_context _wmakepath_s _wsplitpath_s wcscpy_s __current_exception memset memmove __CxxFrameHandler3 _CxxThrowException __std_exception_destroy __std_exception_copy memcpy _invoke_watson

Sharing