1bc3acf0f946684a1e6367f941460e4c359755a24e716f34eede42dc0db9c78e[.]exe

General

Target
1bc3acf0f946684a1e6367f941460e4c359755a24e716f34eede42dc0db9c78e.exe
Size 403KB
Sample241113-phemassbpm
SHA256 1bc3acf0f946684a1e6367f941460e4c359755a24e716f34eede42dc0db9c78e
MD5 d2457dbe5979649366dcd81255759b73
SHA1 cbb4af18d3c166a3cf3b4d7e5ded40b0bcaf5e58
SHA512 e2b5c9621caa455a0115e04a9b8bef743c17854f1d1da2bde0cdd8670899f52147417160a2e5fff615fa4d917975eef0c5c51403a3ad38ebb41b2efeb2b34c54
SSDEEP 6144:3IQX0MvmkY7ZCulsqm03mIUUMrMzU8iHNL7NlFBa:3IQkMvmkYNCuGqJWIkMHitvHFBa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc3acf0f946684a1e6367f941460e4c359755a24e716f34eede42dc0db9c78e.exe

File Explorer

1bc3acf0f946684a1e6367f941460e4c359755a24e716f34eede42dc0db9c78e.exe

.exe 403KB

1bc3acf0f946684a1e6367f941460e4c359755a24e716f34eede42dc0db9c78e.exe

IMPHASH 25babacd02a2b569479e22be1b5bfe7e
SHA256 1bc3acf0f946684a1e6367f941460e4c359755a24e716f34eede42dc0db9c78e
MD5 d2457dbe5979649366dcd81255759b73
SHA1 cbb4af18d3c166a3cf3b4d7e5ded40b0bcaf5e58
SHA512 e2b5c9621caa455a0115e04a9b8bef743c17854f1d1da2bde0cdd8670899f52147417160a2e5fff615fa4d917975eef0c5c51403a3ad38ebb41b2efeb2b34c54
SSDEEP 6144:3IQX0MvmkY7ZCulsqm03mIUUMrMzU8iHNL7NlFBa:3IQkMvmkYNCuGqJWIkMHitvHFBa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16729

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA WriteConsoleInputW WritePrivateProfileStructA EnumDateFormatsExW CopyFileExW BuildCommDCBAndTimeoutsA EnumCalendarInfoW VerSetConditionMask GetEnvironmentStringsW GetModuleHandleExW WaitForSingleObject _lclose GetCurrentThread EnumCalendarInfoExW EnumResourceTypesA SetProcessPriorityBoost GlobalAlloc LoadLibraryW GetFileAttributesA GetComputerNameExA TransactNamedPipe GetConsoleAliasW SetMessageWaitingIndicator IsDBCSLeadByte lstrcmpW DeactivateActCtx GetStdHandle OpenMutexW SetLastError GetProcAddress GetFirmwareEnvironmentVariableW SearchPathA ResetEvent OpenWaitableTimerW SetCalendarInfoW SetConsoleOutputCP WriteProfileSectionW AddAtomA GetPrivateProfileSectionNamesA FindFirstVolumeMountPointA GetModuleHandleA ContinueDebugEvent CreateMutexA FindNextFileW GetStringTypeW FatalAppExitA GetWindowsDirectoryW DeleteFileW IsValidLocale EnumSystemLocalesA GetLastError HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate HeapDestroy HeapFree HeapAlloc GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar SetFilePointer HeapSize CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA DeleteFileA

user32

LoadMenuA

Sharing