5a8c3758a3d495187da5839a5ed99bfd[.]exe

General

Target
5a8c3758a3d495187da5839a5ed99bfd.exe
Size 442KB
Sample241016-tkmg5syckd
SHA256 f018d1a30bc424bfc07ffdf8561dbab03c631550dc152ded17ba2c5def8b23f6
MD5 5a8c3758a3d495187da5839a5ed99bfd
SHA1 c7a8f68b6eb62aca83b92b46739a2635ba52c27f
SHA512 c977c1354f130e00038eb9836f21917433a8b0126a01ebd30fe34693d00330fa4f2527b41ffaca229c3faaf5e2757b40b0b76ad30e1d88fd12926c4babceff3a
SSDEEP 6144:mcqqw6mlLclXx7gK2ErbkX1Qp9xOaWr/hJaqDn4owTU:cZ6mFEB78muaK5QSnWU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8c3758a3d495187da5839a5ed99bfd.exe

File Explorer

5a8c3758a3d495187da5839a5ed99bfd.exe

.exe 442KB

5a8c3758a3d495187da5839a5ed99bfd.exe

IMPHASH b898b6e64a85434ea001f434034adbf3
SHA256 f018d1a30bc424bfc07ffdf8561dbab03c631550dc152ded17ba2c5def8b23f6
MD5 5a8c3758a3d495187da5839a5ed99bfd
SHA1 c7a8f68b6eb62aca83b92b46739a2635ba52c27f
SHA512 c977c1354f130e00038eb9836f21917433a8b0126a01ebd30fe34693d00330fa4f2527b41ffaca229c3faaf5e2757b40b0b76ad30e1d88fd12926c4babceff3a
SSDEEP 6144:mcqqw6mlLclXx7gK2ErbkX1Qp9xOaWr/hJaqDn4owTU:cZ6mFEB78muaK5QSnWU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14764

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement InterlockedDecrement SetEnvironmentVariableW CreateJobObjectW QueryDosDeviceA InterlockedCompareExchange SetVolumeMountPointW GetComputerNameW GetTimeFormatA _lcreat GetTickCount CreateNamedPipeW LocalFlags SetFileTime ClearCommBreak TlsSetValue SetFileShortNameW LoadLibraryW CopyFileW _hread GetCalendarInfoA SetVolumeMountPointA GetVersionExW GetFileAttributesA GetModuleFileNameW CreateActCtxA GetEnvironmentVariableA RaiseException GetShortPathNameA LCMapStringA VerifyVersionInfoW GetConsoleAliasExesA GetLogicalDriveStringsA GetLastError GetProcAddress EnumSystemCodePagesW SetComputerNameA SetFileAttributesA GlobalFree LoadLibraryA InterlockedExchangeAdd LocalAlloc CreateHardLinkW GetNumberFormatW CreateEventW OpenEventA FoldStringW GlobalWire GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW SetCalendarInfoA SetProcessShutdownParameters GetDiskFreeSpaceExA ReadConsoleInputW GetCurrentProcessId DebugBreak GetTempPathA CommConfigDialogW GetLocaleInfoA SetFilePointer GetStdHandle EnumCalendarInfoA EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW RtlUnwind HeapAlloc WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsFree SetLastError GetCurrentThreadId WriteFile FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetStringTypeW

gdi32

CreateDCW GetCharWidth32A GetCharWidthI

winhttp

WinHttpOpen

Name

.text

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

237KB

Virtual Size

236KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mohag

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.munoca

Size

512B

Virtual Size

214B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wifi

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

5a8c3758a3d495187da5839a5ed99bfd.exe

kernel32

gdi32

winhttp

generic