661d1fe9902109bb8bec961dcde8e944[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
661d1fe9902109bb8bec961dcde8e944.exe
Size 424KB
Sample241010-bz81kstemd
SHA256 6dae626cd4840dddef5d9581045fbd59b761fa0df26746e29f4d7994d816369a
MD5 661d1fe9902109bb8bec961dcde8e944
SHA1 ecb24ebb86b75a502f4cb3d90e84bea2f0f4d56c
SHA512 9629803b875554c493a019db5a3502757a498434ba39c23f16961c7aac16131d48529285ff82ddbd46d1c1a8cf9dc4e263cc968050b7e348a569139675dc2fe0
SSDEEP 6144:CzcuRqKnoKvcEbxJODkS91cSWV1mdG5D8LHXXKXBeTy:gkKPtJekSzSKsKjXOB2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661d1fe9902109bb8bec961dcde8e944.exe

File Explorer

661d1fe9902109bb8bec961dcde8e944.exe

.exe 424KB

661d1fe9902109bb8bec961dcde8e944.exe

IMPHASH 9eefacf83d553309fed787be341d76f9
SHA256 6dae626cd4840dddef5d9581045fbd59b761fa0df26746e29f4d7994d816369a
MD5 661d1fe9902109bb8bec961dcde8e944
SHA1 ecb24ebb86b75a502f4cb3d90e84bea2f0f4d56c
SHA512 9629803b875554c493a019db5a3502757a498434ba39c23f16961c7aac16131d48529285ff82ddbd46d1c1a8cf9dc4e263cc968050b7e348a569139675dc2fe0
SSDEEP 6144:CzcuRqKnoKvcEbxJODkS91cSWV1mdG5D8LHXXKXBeTy:gkKPtJekSzSKsKjXOB2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

249837

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW InterlockedDecrement GetCurrentProcess GetLogicalDriveStringsW SetEnvironmentVariableW SetVolumeMountPointW GetTimeFormatA GetTickCount CreateNamedPipeW LocalFlags GetNumberFormatA ClearCommBreak GetConsoleAliasExesW GetEnvironmentStrings LoadLibraryW GetLocaleInfoW _hread GetCalendarInfoW SetVolumeMountPointA GetVersionExW EnumSystemCodePagesA CreateSemaphoreA GetFileAttributesW GetModuleFileNameW CreateActCtxA GetShortPathNameA CreateJobObjectA VerifyVersionInfoW InterlockedExchange InterlockedIncrement GetLastError GetCurrentDirectoryW GetProcAddress CopyFileA SetComputerNameA SetFileAttributesA DefineDosDeviceA GlobalFree FindClose LoadLibraryA LocalAlloc CreateHardLinkW GetNumberFormatW OpenEventA FoldStringW SetEnvironmentVariableA GlobalWire GetModuleFileNameA EnumDateFormatsA GetShortPathNameW SetFileShortNameA GetDiskFreeSpaceExA ReadConsoleInputW DebugBreak GetTempPathA TlsFree LCMapStringW CreateProcessW CommConfigDialogA EnumCalendarInfoA SetFilePointer GetStdHandle GetComputerNameA CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle FlushFileBuffers MultiByteToWideChar HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess IsDebuggerPresent GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc Sleep HeapSize ExitProcess WriteFile SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount SetStdHandle GetModuleHandleA GetConsoleCP GetConsoleMode

gdi32

CreateDCW GetCharWidth32A GetCharWidthI

advapi32

ReadEventLogW

ole32

CoSuspendClassObjects

winhttp

WinHttpOpen WinHttpSetDefaultProxyConfiguration

msimg32

AlphaBlend