281bff88b708e81638f6c4548d0bac897a059c54[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
281bff88b708e81638f6c4548d0bac897a059c54.exe
Size 206KB
Sample241111-vcvdfssakn
SHA256 8b72b2f58a4fe3d7be31e9bc4b53c8b21bc3410243325d2ac15627419fd051ff
MD5 3ab620205abe34e0bb0a34c253b30cd7
SHA1 281bff88b708e81638f6c4548d0bac897a059c54
SHA512 f62c252f002843fb43ac035d4155293cf15e25d86a87f5415d506f0c07fe9568135c450a27d2a811116ae6fc52a8a470aaed5497f32d7d3b5b4d1666e8736bba
SSDEEP 6144:T+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6T+:T+U9qyFhJy56d/eoyXjn9W+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
281bff88b708e81638f6c4548d0bac897a059c54.exe

File Explorer

281bff88b708e81638f6c4548d0bac897a059c54.exe

.exe 206KB

281bff88b708e81638f6c4548d0bac897a059c54.exe

IMPHASH e7f2d5507b09bfb1c824fe29a99d8a60
SHA256 8b72b2f58a4fe3d7be31e9bc4b53c8b21bc3410243325d2ac15627419fd051ff
MD5 3ab620205abe34e0bb0a34c253b30cd7
SHA1 281bff88b708e81638f6c4548d0bac897a059c54
SHA512 f62c252f002843fb43ac035d4155293cf15e25d86a87f5415d506f0c07fe9568135c450a27d2a811116ae6fc52a8a470aaed5497f32d7d3b5b4d1666e8736bba
SSDEEP 6144:T+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6T+:T+U9qyFhJy56d/eoyXjn9W+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DosDateTimeToFileTime GetSystemDirectoryW WriteFile GetProcAddress CreateFileA GetModuleHandleA CreateDirectoryA FileTimeToSystemTime IsBadStringPtrA GetSystemDirectoryA GetTimeFormatA lstrcpyn LocalAlloc OpenWaitableTimerA EnumCalendarInfoA GetNamedPipeInfo IsValidCodePage

user32

EnumChildWindows GetSysColor DialogBoxParamA CreateMenu EnumDesktopsA GetClassNameA CharNextA ReleaseDC RegisterWindowMessageA EnumWindows InvalidateRgn SetWindowLongA ShowCursor CreateAcceleratorTableW GetCaretPos SetFocus UnregisterClassW PeekMessageW SetMenu GetMenuItemInfoA LoadImageA SendMessageW DialogBoxIndirectParamA CopyRect GetWindowRect GetScrollPos CopyImage GetSysColorBrush PostQuitMessage CheckDlgButton GetDC IsWindowEnabled FillRect CharLowerA CreateDesktopA UpdateWindow SetCapture SendDlgItemMessageW LoadBitmapW CreateWindowExW GetDlgItemTextA DefDlgProcA GetKeyboardType DefWindowProcW CloseWindow DestroyIcon SetActiveWindow CharUpperW

gdi32

GetPixelFormat GetMetaRgn GetEnhMetaFilePaletteEntries GetWorldTransform GetTextExtentExPointA GetPath GetLogColorSpaceW

advapi32

RegOpenKeyExA RegCreateKeyExW RegCloseKey RegDeleteValueW RegReplaceKeyA RegEnumValueA

shell32

StrCmpNIA StrRStrA StrStrIA

winspool.drv

EnumPrinterDataA AddPortW DocumentPropertiesW GetJobA ConfigurePortA AddMonitorA EnumPrinterKeyA EndPagePrinter DocumentPropertySheets

inetcomm

MimeOleConvertEnrichedToHTML MimeOleSMimeCapInit MimeOleGetBodyPropW MimeEditViewSource DllGetClassObject MimeOleCreateMessageParts MimeOleCreateBody HrGetDisplayNameWithSizeForFile CreateIMAPTransport HrFreeAttachData HrGetLastOpenFileDirectoryW MimeOleGetCodePageCharset MimeEditDocumentFromStream

crypt32

CryptSignCertificate CertCreateCRLContext CryptMsgOpenToDecode CertIsValidCRLForCertificate CryptGetOIDFunctionAddress CertAddEncodedCertificateToStore

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.dHGmL

Size

1KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lzmjSu

Size

512B

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.YOSWO

Size

1KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sTDEgl

Size

2KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fwQO

Size

3KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kubC

Size

1024B

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hkw

Size

1KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

281bff88b708e81638f6c4548d0bac897a059c54.exe

kernel32

user32

gdi32

advapi32

shell32

winspool.drv

inetcomm

crypt32

generic