66c625cef9aa371ac55a64c94691891c[.]exe

General

Target
66c625cef9aa371ac55a64c94691891c.exe
Size 435KB
Sample241016-a4mgpsycrn
SHA256 c4139579bd2c09fa3f876c15b04be33bd25e5c524fb687557771a07e99e22b9c
MD5 66c625cef9aa371ac55a64c94691891c
SHA1 10b09c65d81dcc2c1230a2ad39a32e8fea42ba6a
SHA512 bf058ff758690532141d71c7e52baa959d97a9e36e9a0d92c01a608507fa6195d3df08b8e9e6efdf5396ca4763e9ab9cc44520f5841305e25d4a745b54bfa0e8
SSDEEP 6144:AfVdcFmfL/4eNwXKPD0olLV1P83S6EbINbGaktafk7DA+L:Unf74eNwXKtV1iS6EbI4/tlD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66c625cef9aa371ac55a64c94691891c.exe

File Explorer

66c625cef9aa371ac55a64c94691891c.exe

.exe 435KB

66c625cef9aa371ac55a64c94691891c.exe

IMPHASH f8250be4329d3243c57b4a0ef0e0e955
SHA256 c4139579bd2c09fa3f876c15b04be33bd25e5c524fb687557771a07e99e22b9c
MD5 66c625cef9aa371ac55a64c94691891c
SHA1 10b09c65d81dcc2c1230a2ad39a32e8fea42ba6a
SHA512 bf058ff758690532141d71c7e52baa959d97a9e36e9a0d92c01a608507fa6195d3df08b8e9e6efdf5396ca4763e9ab9cc44520f5841305e25d4a745b54bfa0e8
SSDEEP 6144:AfVdcFmfL/4eNwXKPD0olLV1P83S6EbINbGaktafk7DA+L:Unf74eNwXKtV1iS6EbI4/tlD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

29208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW SetComputerNameW GetComputerNameW GetTimeFormatA CreateNamedPipeW GetCurrencyFormatA GetConsoleAliasExesW EnumTimeFormatsW TlsSetValue GetEnvironmentStrings SetFileShortNameW GetLocaleInfoW _hread GetCalendarInfoW SetVolumeMountPointA GetFileAttributesA CreateSemaphoreA GetModuleFileNameW CreateActCtxA GetShortPathNameA CreateJobObjectA VerifyVersionInfoW InterlockedExchange ClearCommError GetLastError GetCurrentDirectoryW GetProcAddress EnumSystemCodePagesW DefineDosDeviceA FindClose LoadLibraryA InterlockedExchangeAdd LocalAlloc CreateHardLinkW GetNumberFormatW GetCommMask FoldStringW SetEnvironmentVariableA EnumDateFormatsA GlobalUnWire OpenEventW GetShortPathNameW GetDiskFreeSpaceExA GetVersionExA ReadConsoleInputW GetTempPathA LocalFree SetFileAttributesW LCMapStringW CreateProcessW CommConfigDialogA GetLogicalDriveStringsA GlobalCompact UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar HeapFree HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapSize SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile GetModuleHandleA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle

gdi32

CreateDCA GetCharWidth32A GetCharWidthI

Sharing