1a3eb6c2934a1536f733f5662257009f65861556966343a1a466ad79949b75d7[.]exe

General

Target
1a3eb6c2934a1536f733f5662257009f65861556966343a1a466ad79949b75d7.exe
Size 358KB
Sample241113-mszdcazgpf
SHA256 1a3eb6c2934a1536f733f5662257009f65861556966343a1a466ad79949b75d7
MD5 9cb50556ba4d918f323e0cc281ace45f
SHA1 d3461090437334060953d5ce5de8faf4ccf65248
SHA512 f9edfc87d0adbcadc2e787584311b28bc5781db2163327e442ce16d6993bcc30bcd097a637b1c46461539da3eac4f4a3ea20a25271bbfe257eb4b275a7d565dc
SSDEEP 6144:rWUi5w29Ldq62MDzN5IhDM1Fn67NJuEW8SWBJD0Lym6Vnwyt:rWd5w29Bq62MvNihDwn4CtwwLMVnz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a3eb6c2934a1536f733f5662257009f65861556966343a1a466ad79949b75d7.exe

File Explorer

1a3eb6c2934a1536f733f5662257009f65861556966343a1a466ad79949b75d7.exe

.exe 358KB

1a3eb6c2934a1536f733f5662257009f65861556966343a1a466ad79949b75d7.exe

IMPHASH 58071948c33b7dec9bea638ac45f94ca
SHA256 1a3eb6c2934a1536f733f5662257009f65861556966343a1a466ad79949b75d7
MD5 9cb50556ba4d918f323e0cc281ace45f
SHA1 d3461090437334060953d5ce5de8faf4ccf65248
SHA512 f9edfc87d0adbcadc2e787584311b28bc5781db2163327e442ce16d6993bcc30bcd097a637b1c46461539da3eac4f4a3ea20a25271bbfe257eb4b275a7d565dc
SSDEEP 6144:rWUi5w29Ldq62MDzN5IhDM1Fn67NJuEW8SWBJD0Lym6Vnwyt:rWd5w29Bq62MvNihDwn4CtwwLMVnz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

34313

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\rubugowasepeba\sapiwewopucom\zakaley-hex papi.pdb

kernel32

SetDefaultCommConfigW CreateHardLinkA WaitForSingleObjectEx FreeEnvironmentStringsA EnumCalendarInfoExW GetConsoleTitleA ReadConsoleW GetCompressedFileSizeW GetConsoleAliasExesW WaitNamedPipeW SetHandleCount LoadLibraryW GetConsoleMode InterlockedPopEntrySList GetStringTypeExW lstrcpynW FindNextVolumeW Beep GetFileAttributesW WriteConsoleW CreateActCtxA IsBadStringPtrA WritePrivateProfileStringW GetConsoleAliasesW GetStdHandle ChangeTimerQueueTimer SetLastError GetProcAddress GlobalSize EnumSystemCodePagesW CreateMemoryResourceNotification SearchPathA LoadLibraryA LocalAlloc DnsHostnameToComputerNameA AddAtomW BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA GetCommTimeouts QueryPerformanceFrequency DeleteFileW DebugBreak ReadConsoleOutputCharacterW FlushFileBuffers CloseHandle CreateFileA GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoW GetCommState GetConsoleAliasExesLengthA VirtualQuery FindResourceExW GetNumaProcessorNode VirtualAlloc InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP

user32

ToAsciiEx GetKeyNameTextA LoadMenuA IsWindowEnabled DrawEdge GetScrollInfo GetWindowLongA LoadBitmapW ModifyMenuA

gdi32

GetCharABCWidthsA CreateDiscardableBitmap GetCharWidthI

advapi32

GetEventLogInformation SetKernelObjectSecurity

Sharing