dbd6305b0c0faf3208f3282e7afa40c371e0f08149c7b7c6a7995c0ff93639ae[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
dbd6305b0c0faf3208f3282e7afa40c371e0f08149c7b7c6a7995c0ff93639ae.exe
Size 212KB
Sample241112-dj4f9swpcl
SHA256 dbd6305b0c0faf3208f3282e7afa40c371e0f08149c7b7c6a7995c0ff93639ae
MD5 3dfa1075101f7ed661d72799b0779f27
SHA1 8fe65f45782eee6a0165bd257450f9f152075e88
SHA512 28b7d81819ef15d550592ad60eedbaca87cb2e214a59cc8a164a5acd734c1ab50335709f7b163eb3012a62e1bf4405bc05d0aaa72474c81bc5517d94a021d92b
SSDEEP 6144:RxNqLW6opBZMU/y/JEGjg+op2BSNCCr7/jU:XA6NBT/yEGjWwa7vU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbd6305b0c0faf3208f3282e7afa40c371e0f08149c7b7c6a7995c0ff93639ae.exe

File Explorer

dbd6305b0c0faf3208f3282e7afa40c371e0f08149c7b7c6a7995c0ff93639ae.exe

.exe 212KB

dbd6305b0c0faf3208f3282e7afa40c371e0f08149c7b7c6a7995c0ff93639ae.exe

IMPHASH cb466204f5c37666fe7d05c000308c29
SHA256 dbd6305b0c0faf3208f3282e7afa40c371e0f08149c7b7c6a7995c0ff93639ae
MD5 3dfa1075101f7ed661d72799b0779f27
SHA1 8fe65f45782eee6a0165bd257450f9f152075e88
SHA512 28b7d81819ef15d550592ad60eedbaca87cb2e214a59cc8a164a5acd734c1ab50335709f7b163eb3012a62e1bf4405bc05d0aaa72474c81bc5517d94a021d92b
SSDEEP 6144:RxNqLW6opBZMU/y/JEGjg+op2BSNCCr7/jU:XA6NBT/yEGjWwa7vU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SleepEx GlobalFindAtomW GetAtomNameW GlobalGetAtomNameA GetCalendarInfoW RaiseException Sleep CreateDirectoryA CreateFileA SearchPathA GetTempPathW CreateDirectoryW CreateNamedPipeA CopyFileExA lstrcmp GetSystemDirectoryA GetModuleHandleA EndUpdateResourceW GetStringTypeW WriteFile GetProcAddress FreeLibrary GetLocaleInfoW FreeResource FindAtomW OpenMutexW OpenSemaphoreA IsValidCodePage FileTimeToLocalFileTime QueryPerformanceCounter GetVersion OpenSemaphoreW

user32

PeekMessageA GetSysColor GetKeyboardType LoadCursorA DialogBoxIndirectParamW RemoveMenu IsWindowEnabled DialogBoxIndirectParamA GetDlgItemTextA GetCapture AdjustWindowRect SetCapture CharNextW ShowWindow RegisterWindowMessageA GetForegroundWindow SendDlgItemMessageW OffsetRect GetDlgItem LoadCursorW UpdateWindow LoadIconW SetMenu LoadBitmapA EndMenu CopyImage ShowCursor SetParent MessageBoxIndirectW WaitForInputIdle RegisterClassExW GetDC InsertMenuW EnableMenuItem GetIconInfo CheckRadioButton FrameRect SetWindowPos GetMenuItemID DialogBoxParamW GetClassLongA GetActiveWindow GetMenuStringA SetActiveWindow FindWindowW GetWindowRgn

gdi32

GetBitmapDimensionEx MoveToEx PolyBezier GetTextExtentExPointW ExtTextOutA RealizePalette StartDocA GetEnhMetaFileBits UpdateICMRegKeyA GetRasterizerCaps GetSystemPaletteUse

advapi32

RegReplaceKeyA RegCreateKeyExW RegFlushKey RegDeleteKeyW RegCreateKeyExW RegOpenKeyA RegCreateKeyExA

winmm

waveInStop OpenDriver waveOutGetErrorTextW

oledlg

OleUIUpdateLinksA OleUIObjectPropertiesW OleUIEditLinksW OleUIEditLinksA OleUIChangeSourceW

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bqtZlw

Size

2KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.piDQ

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.XyHwD

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hJ

Size

2KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Yj

Size

512B

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.VxXS

Size

1024B

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.LadQl

Size

1024B

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zvc

Size

2KB

Virtual Size

241KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

171KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dbd6305b0c0faf3208f3282e7afa40c371e0f08149c7b7c6a7995c0ff93639ae.exe

kernel32

user32

gdi32

advapi32

winmm

oledlg

generic