eptfydgqkrerhxuq[.]exe

General

Target
eptfydgqkrerhxuq.exe
Size 2.2MB
Sample241016-axxdbstgpc
SHA256 a91d9f566a433a99e842f33931932c66b86f8c5b74b4322484e54acaa06a2cff
MD5 c1d9f60cd95a73f8e44ea94e3aa7c0a4
SHA1 13ea3d0220f3a61b210731ed65e99a86d0757f4c
SHA512 b4dc9eacf095f3eb07e08cc782a99009e0be438f24ca79e53d8da727bfec20fbf8050e22382fb9ad44c02d956fb35447fdc5a90da46d18a71d8fa9ebecdf3f50
SSDEEP 24576:VnV20g3y1Nu/hZ99HKG354VTH62rtJNxlf/8D9+qNgzQJWDqVT86sSvPi9tuyU:uWohZTKi49Bff/1QQDqrsSiru
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eptfydgqkrerhxuq.exe

File Explorer

eptfydgqkrerhxuq.exe

.exe 2.2MB

eptfydgqkrerhxuq.exe

IMPHASH 8f84d7ab87727163d85d83148ddb7484
SHA256 a91d9f566a433a99e842f33931932c66b86f8c5b74b4322484e54acaa06a2cff
MD5 c1d9f60cd95a73f8e44ea94e3aa7c0a4
SHA1 13ea3d0220f3a61b210731ed65e99a86d0757f4c
SHA512 b4dc9eacf095f3eb07e08cc782a99009e0be438f24ca79e53d8da727bfec20fbf8050e22382fb9ad44c02d956fb35447fdc5a90da46d18a71d8fa9ebecdf3f50
SSDEEP 24576:VnV20g3y1Nu/hZ99HKG354VTH62rtJNxlf/8D9+qNgzQJWDqVT86sSvPi9tuyU:uWohZTKi49Bff/1QQDqrsSiru
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

290644

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

GetUserNameA

kernel32

Sleep GlobalMemoryStatusEx WideCharToMultiByte GetCurrentProcess VirtualAlloc GetProcAddress LoadLibraryA CreateFileA GetDiskFreeSpaceExA CloseHandle DeviceIoControl GetSystemInfo GetTickCount GetModuleFileNameA GetModuleHandleA MultiByteToWideChar CreateToolhelp32Snapshot Process32First Process32Next GetLastError VirtualProtect VirtualQueryEx ReadProcessMemory WriteProcessMemory VirtualFree VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateFileW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess WriteFile HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW OutputDebugStringW IsValidCodePage GetACP GetOEMCP HeapReAlloc GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx FlushFileBuffers ReadFile ReadConsoleW FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle HeapSize RtlUnwind

Sharing