422d2cea49b00fdc8b97b75b623006386426ec23637c53341e03d250e5ffe21b[.]exe

General

Target
422d2cea49b00fdc8b97b75b623006386426ec23637c53341e03d250e5ffe21b.exe
Size 259KB
Sample241015-brc8yazhmk
SHA256 422d2cea49b00fdc8b97b75b623006386426ec23637c53341e03d250e5ffe21b
MD5 91be25f31b7891908a50dfdc9f03f2b4
SHA1 91db4bc09a4976db1b9922e09f2330b48ae50338
SHA512 39f10cdad12c1857378dbb262c2d124450f03de19109f5012472d14cdba2c1b609d16a33f136be3175699b6747f96f4053e34072b21e4f1c8e30035b4a02e1b9
SSDEEP 3072:7jbcVSAwzdpaK6AQcrI+t5wCyxF9Davc5oUCIqzpjAqMi:PbcgeKJ8/4c5oVIqzpjAqh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422d2cea49b00fdc8b97b75b623006386426ec23637c53341e03d250e5ffe21b.exe

File Explorer

422d2cea49b00fdc8b97b75b623006386426ec23637c53341e03d250e5ffe21b.exe

.exe 259KB

422d2cea49b00fdc8b97b75b623006386426ec23637c53341e03d250e5ffe21b.exe

IMPHASH 26a7df6d78a90bac0a71dda0842d4e4f
SHA256 422d2cea49b00fdc8b97b75b623006386426ec23637c53341e03d250e5ffe21b
MD5 91be25f31b7891908a50dfdc9f03f2b4
SHA1 91db4bc09a4976db1b9922e09f2330b48ae50338
SHA512 39f10cdad12c1857378dbb262c2d124450f03de19109f5012472d14cdba2c1b609d16a33f136be3175699b6747f96f4053e34072b21e4f1c8e30035b4a02e1b9
SSDEEP 3072:7jbcVSAwzdpaK6AQcrI+t5wCyxF9Davc5oUCIqzpjAqMi:PbcgeKJ8/4c5oVIqzpjAqh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6690

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleA InterlockedDecrement GlobalSize SetDefaultCommConfigW QueryDosDeviceA GetComputerNameW SetEvent GetNumaAvailableMemoryNode FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA SetCommState GetConsoleWindow ReadConsoleOutputW GetVersionExW GetStringTypeExW HeapDestroy GetFileAttributesW GetConsoleFontSize OpenJobObjectA WritePrivateProfileStringW DisconnectNamedPipe LCMapStringA GetLastError GetProcAddress SetStdHandle LoadLibraryA InterlockedExchangeAdd LocalAlloc MoveFileA GetModuleFileNameA BuildCommDCBA FatalAppExitA GetShortPathNameW SetCalendarInfoA FindAtomW OpenFileMappingA GetNumaProcessorNode DeleteVolumeMountPointA SearchPathW HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

gdi32

GetBoundsRect

advapi32

ClearEventLogW

Name

.text

Size

89KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

39.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.dasu

Size

14KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.dedileg

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

139KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

422d2cea49b00fdc8b97b75b623006386426ec23637c53341e03d250e5ffe21b.exe

kernel32

gdi32

advapi32

generic