75d666ab409f01a0164213b301ba23bd21cf5f5780bbeaf5cc701439a282f6cf[.]exe

General

Target
75d666ab409f01a0164213b301ba23bd21cf5f5780bbeaf5cc701439a282f6cf.exe
Size 275KB
Sample241022-dvgrmstflg
SHA256 75d666ab409f01a0164213b301ba23bd21cf5f5780bbeaf5cc701439a282f6cf
MD5 47ff5f3a4ecceaf12c1968105269e82b
SHA1 ceeb2cb8fb13c84fd9f8de0557a6c0e13a4678f3
SHA512 620c0c1480bccdfd1f909c19ca5ef43e68a3ff8408ac008e23496be66ebe2c902cec87937e096788025820b43a6172577c38a29e9651d5750d855fdbdd919831
SSDEEP 6144:lTtg2+tUG2k5kc+SmyETJTgF7sTV9SHgo2TWU:lK2+2YpWGseHgo2a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75d666ab409f01a0164213b301ba23bd21cf5f5780bbeaf5cc701439a282f6cf.exe

File Explorer

75d666ab409f01a0164213b301ba23bd21cf5f5780bbeaf5cc701439a282f6cf.exe

.exe 275KB

75d666ab409f01a0164213b301ba23bd21cf5f5780bbeaf5cc701439a282f6cf.exe

IMPHASH 32fbf5b10b16ec517b227ff71a382b38
SHA256 75d666ab409f01a0164213b301ba23bd21cf5f5780bbeaf5cc701439a282f6cf
MD5 47ff5f3a4ecceaf12c1968105269e82b
SHA1 ceeb2cb8fb13c84fd9f8de0557a6c0e13a4678f3
SHA512 620c0c1480bccdfd1f909c19ca5ef43e68a3ff8408ac008e23496be66ebe2c902cec87937e096788025820b43a6172577c38a29e9651d5750d855fdbdd919831
SSDEEP 6144:lTtg2+tUG2k5kc+SmyETJTgF7sTV9SHgo2TWU:lK2+2YpWGseHgo2a
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

57688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

VariantClear

kernel32

EnumSystemLocalesEx IsValidLocaleName LCMapStringEx GetUserDefaultLocaleName FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter FlsFree FlsSetValue FlsGetValue FlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext LoadLibraryExW ReadConsoleW SetStdHandle WriteConsoleW OutputDebugStringW LocalFree GetTickCount64 SetEndOfFile GetConsoleMode GetConsoleCP FlushFileBuffers SetFilePointerEx GetThreadContext GetTempFileNameW GetFileSize SetThreadContext SetFilePointer FreeLibrary GetCurrentProcess WaitForSingleObject WriteFile OpenProcess GetSystemDirectoryW LoadLibraryW GetModuleFileNameW CreateFileW GetTempPathW GetLastError GetProcAddress VirtualAllocEx LoadLibraryA GetModuleHandleA lstrcatW Wow64SetThreadContext CloseHandle WriteProcessMemory ResumeThread Wow64GetThreadContext CreateThread HeapAlloc GetProcessHeap Sleep CreateRemoteThread CreateToolhelp32Snapshot VirtualProtectEx VirtualProtect ExitProcess CreateMutexA HeapReAlloc CreateFileA FindFirstFileW MapViewOfFile UnmapViewOfFile CompareFileTime HeapFree GetModuleHandleW GetProcessTimes GetFileAttributesA TerminateProcess ReadFile lstrcatA MultiByteToWideChar CreateDirectoryA CopyFileA SetFileAttributesA Process32FirstW CreateFileMappingA GetModuleFileNameA Process32NextW IsDebuggerPresent FindNextFileW DeleteFileW ExpandEnvironmentStringsW WideCharToMultiByte GetStringTypeW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetLocaleInfoEx GetCPInfo IsProcessorFeaturePresent GetSystemTimeAsFileTime GetCommandLineW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx InitializeCriticalSectionAndSpinCount GetModuleHandleExW HeapSize IsValidCodePage GetACP GetOEMCP SetLastError GetCurrentThreadId GetStdHandle GetFileType InitOnceExecuteOnce GetStartupInfoW

Sharing