6234c646663b6ee9022cc472b7da7211ac13d72384817a2c23f89c7cabf49760N[.]exe

General

Target
6234c646663b6ee9022cc472b7da7211ac13d72384817a2c23f89c7cabf49760N.exe
Size 368KB
Sample241113-qdvndssfmn
SHA256 ff8eeab628457f3042682c17e1ab817da8275fe27130519b233776a2ceeb2386
MD5 3f0950829497d0af0619a25dc1e4e070
SHA1 37e61468eabe70765f3a22bdeae6b3b49013196d
SHA512 07f4bc51c16f45a98789bd3ff955c1cc92ce05d9c4c6e26042f5162b501c406ef3f59274c9724a9af17cab8a89261b4a070c054adb8226d5cbc7f8074c3cb940
SSDEEP 6144:Q5Ia0fTEK5Pf8VF9miSi41pEHHAXDwxiZtLDtQ8:o0/5PfkF9miSZaHyIiZtLD28
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6234c646663b6ee9022cc472b7da7211ac13d72384817a2c23f89c7cabf49760N.exe

File Explorer

6234c646663b6ee9022cc472b7da7211ac13d72384817a2c23f89c7cabf49760N.exe

.exe 368KB

6234c646663b6ee9022cc472b7da7211ac13d72384817a2c23f89c7cabf49760N.exe

IMPHASH f88982a603d93c22b0731529c5e6f4b9
SHA256 ff8eeab628457f3042682c17e1ab817da8275fe27130519b233776a2ceeb2386
MD5 3f0950829497d0af0619a25dc1e4e070
SHA1 37e61468eabe70765f3a22bdeae6b3b49013196d
SHA512 07f4bc51c16f45a98789bd3ff955c1cc92ce05d9c4c6e26042f5162b501c406ef3f59274c9724a9af17cab8a89261b4a070c054adb8226d5cbc7f8074c3cb940
SSDEEP 6144:Q5Ia0fTEK5Pf8VF9miSi41pEHHAXDwxiZtLDtQ8:o0/5PfkF9miSZaHyIiZtLD28
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hufoga68-lidoxev wux.pdb

kernel32

AddConsoleAliasW GetProcessPriorityBoost GetModuleHandleW GetConsoleAliasesLengthA GetWindowsDirectoryA EnumTimeFormatsA GetDateFormatA TzSpecificLocalTimeToSystemTime EnumResourceTypesA SetHandleCount TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW SetConsoleCP FindNextVolumeW GetConsoleAliasW GlobalUnfix GetCPInfoExW GetCurrentDirectoryW SetLastError GetProcAddress HeapSize BeginUpdateResourceW WriteProfileSectionA SetThreadPriorityBoost LoadLibraryA WriteConsoleA InterlockedExchangeAdd WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect TlsAlloc AddConsoleAliasA DebugBreak EnumCalendarInfoExA GetModuleHandleA VerSetConditionMask VirtualAlloc lstrlenA HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing