fe52e3386992de2e0820380a8ef0807ec7f577181fe0500792e57cd72c0bbd9b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
fe52e3386992de2e0820380a8ef0807ec7f577181fe0500792e57cd72c0bbd9b.exe
Size 206KB
Sample241111-xhydeaxkck
SHA256 fe52e3386992de2e0820380a8ef0807ec7f577181fe0500792e57cd72c0bbd9b
MD5 7174408350878bd592d2c241705abcf8
SHA1 02d88bf4fadd4212adf20c8dfbce9770daa2fd1d
SHA512 d417c2e7149f90745eb845af8957cad40928a651ec27346ac81bcbdeca5b04252c87b9ba53f05f46c4a88dfacd9179a78b8cbdcd64a2e55ec5abe9bb3faa79a7
SSDEEP 6144:T+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6Ta:T+U9qyFhJy56d/eoyXjn9Wa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe52e3386992de2e0820380a8ef0807ec7f577181fe0500792e57cd72c0bbd9b.exe

File Explorer

fe52e3386992de2e0820380a8ef0807ec7f577181fe0500792e57cd72c0bbd9b.exe

.exe 206KB

fe52e3386992de2e0820380a8ef0807ec7f577181fe0500792e57cd72c0bbd9b.exe

IMPHASH e7f2d5507b09bfb1c824fe29a99d8a60
SHA256 fe52e3386992de2e0820380a8ef0807ec7f577181fe0500792e57cd72c0bbd9b
MD5 7174408350878bd592d2c241705abcf8
SHA1 02d88bf4fadd4212adf20c8dfbce9770daa2fd1d
SHA512 d417c2e7149f90745eb845af8957cad40928a651ec27346ac81bcbdeca5b04252c87b9ba53f05f46c4a88dfacd9179a78b8cbdcd64a2e55ec5abe9bb3faa79a7
SSDEEP 6144:T+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6Ta:T+U9qyFhJy56d/eoyXjn9Wa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DosDateTimeToFileTime GetSystemDirectoryW WriteFile GetProcAddress CreateFileA GetModuleHandleA CreateDirectoryA FileTimeToSystemTime IsBadStringPtrA GetSystemDirectoryA GetTimeFormatA lstrcpyn LocalAlloc OpenWaitableTimerA EnumCalendarInfoA GetNamedPipeInfo IsValidCodePage

user32

EnumChildWindows GetSysColor DialogBoxParamA CreateMenu EnumDesktopsA GetClassNameA CharNextA ReleaseDC RegisterWindowMessageA EnumWindows InvalidateRgn SetWindowLongA ShowCursor CreateAcceleratorTableW GetCaretPos SetFocus UnregisterClassW PeekMessageW SetMenu GetMenuItemInfoA LoadImageA SendMessageW DialogBoxIndirectParamA CopyRect GetWindowRect GetScrollPos CopyImage GetSysColorBrush PostQuitMessage CheckDlgButton GetDC IsWindowEnabled FillRect CharLowerA CreateDesktopA UpdateWindow SetCapture SendDlgItemMessageW LoadBitmapW CreateWindowExW GetDlgItemTextA DefDlgProcA GetKeyboardType DefWindowProcW CloseWindow DestroyIcon SetActiveWindow CharUpperW

gdi32

GetPixelFormat GetMetaRgn GetEnhMetaFilePaletteEntries GetWorldTransform GetTextExtentExPointA GetPath GetLogColorSpaceW

advapi32

RegOpenKeyExA RegCreateKeyExW RegCloseKey RegDeleteValueW RegReplaceKeyA RegEnumValueA

shell32

StrCmpNIA StrRStrA StrStrIA

winspool.drv

EnumPrinterDataA AddPortW DocumentPropertiesW GetJobA ConfigurePortA AddMonitorA EnumPrinterKeyA EndPagePrinter DocumentPropertySheets

inetcomm

MimeOleConvertEnrichedToHTML MimeOleSMimeCapInit MimeOleGetBodyPropW MimeEditViewSource DllGetClassObject MimeOleCreateMessageParts MimeOleCreateBody HrGetDisplayNameWithSizeForFile CreateIMAPTransport HrFreeAttachData HrGetLastOpenFileDirectoryW MimeOleGetCodePageCharset MimeEditDocumentFromStream

crypt32

CryptSignCertificate CertCreateCRLContext CryptMsgOpenToDecode CertIsValidCRLForCertificate CryptGetOIDFunctionAddress CertAddEncodedCertificateToStore

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.dHGmL

Size

1KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lzmjSu

Size

512B

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.YOSWO

Size

1KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sTDEgl

Size

2KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fwQO

Size

3KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kubC

Size

1024B

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hkw

Size

1KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

fe52e3386992de2e0820380a8ef0807ec7f577181fe0500792e57cd72c0bbd9b.exe

kernel32

user32

gdi32

advapi32

shell32

winspool.drv

inetcomm

crypt32

generic