140601c126ef041f2f82048f78637c73c004a3c6f02044ed7144d377ea8dcbda[.]exe

General

Target
140601c126ef041f2f82048f78637c73c004a3c6f02044ed7144d377ea8dcbda.exe
Size 461KB
Sample241113-plfnrsscjq
SHA256 140601c126ef041f2f82048f78637c73c004a3c6f02044ed7144d377ea8dcbda
MD5 8ce9c9824a14cb8ee5f07fa75559c051
SHA1 d2b915ed4c93416b31ece6d2bc363fe1d8fd4ce9
SHA512 02ccefb81149a28b18043fc4e6d156631a1628d1b2ce331387baaa18acd8dba4b2ee61eebad467e6ccc4b52bd830c38026a47930b18258f388370c88fb854a62
SSDEEP 6144:MU3VUI7YHI04iJO+NeZDZcJJbCNuvv9Da6eHHrt5cLqlY41dPHV:MUFpYHI04iQ+IB6bYun9D2tgqv9V
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
140601c126ef041f2f82048f78637c73c004a3c6f02044ed7144d377ea8dcbda.exe

File Explorer

140601c126ef041f2f82048f78637c73c004a3c6f02044ed7144d377ea8dcbda.exe

.exe 461KB

140601c126ef041f2f82048f78637c73c004a3c6f02044ed7144d377ea8dcbda.exe

IMPHASH 4de9ed260215f1f3725d20c243b4b5e3
SHA256 140601c126ef041f2f82048f78637c73c004a3c6f02044ed7144d377ea8dcbda
MD5 8ce9c9824a14cb8ee5f07fa75559c051
SHA1 d2b915ed4c93416b31ece6d2bc363fe1d8fd4ce9
SHA512 02ccefb81149a28b18043fc4e6d156631a1628d1b2ce331387baaa18acd8dba4b2ee61eebad467e6ccc4b52bd830c38026a47930b18258f388370c88fb854a62
SSDEEP 6144:MU3VUI7YHI04iJO+NeZDZcJJbCNuvv9Da6eHHrt5cLqlY41dPHV:MUFpYHI04iQ+IB6bYun9D2tgqv9V
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

38259

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW EnumCalendarInfoA GetStringTypeA GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW GetCommState ZombifyActCtx GetNamedPipeHandleStateA GetModuleHandleW GetTickCount GetConsoleTitleA EnumResourceTypesA SetProcessPriorityBoost GetDriveTypeA GetEnvironmentStrings GlobalAlloc SetFileShortNameW LoadLibraryW GetConsoleWindow GetConsoleAliasExesLengthW GetFileAttributesA SetConsoleMode GetConsoleAliasW GetFileAttributesW GetBinaryTypeW GetOverlappedResult GetVolumePathNameA FindNextVolumeMountPointW SetTapePosition GetStringTypeExA GetPrivateProfileIntW GlobalUnfix GetLastError GetProcAddress CreateJobSet RemoveDirectoryA SetComputerNameA UnhandledExceptionFilter GetConsoleScreenBufferInfo LocalAlloc BuildCommDCBAndTimeoutsW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA GetPrivateProfileStructA GetModuleFileNameA FindNextFileA GetModuleHandleA FreeEnvironmentStringsW EnumDateFormatsW GetCPInfoExA SetCalendarInfoA TerminateJobObject QueryDepthSList MoveFileWithProgressW DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA SetFilePointer WriteConsoleW FlushFileBuffers WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW IsProcessorFeaturePresent FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary SetStdHandle GetConsoleCP GetConsoleMode CreateFileW

user32

DefDlgProcA GetMenuBarInfo

Sharing