ab4b00b3113a51c0265eee09a449e2fcf9b3f670521d5076822f3a4ee83df9f4N[.]exe

General

Target
ab4b00b3113a51c0265eee09a449e2fcf9b3f670521d5076822f3a4ee83df9f4N.exe
Size 497KB
Sample241113-vm5beawcja
SHA256 ab4b00b3113a51c0265eee09a449e2fcf9b3f670521d5076822f3a4ee83df9f4
MD5 cc7d1f9fd8dce5d2bfd3990517ae12c0
SHA1 164d108837876898d8c711974b95973559fb42ca
SHA512 dd48e8df42a2662dabd31e26bbba9f6857a6ca80bf02299457a12bc13a18ca43cfd67443422913cb3e5bf092ff0f9a0146762444f06f1da0fa4d9bf309a7914f
SSDEEP 6144:gY2wWL10g8MgLrtQM1GaddL+F3yaoeZlGAwFv0R:gY2wWR0gDguGghyadZFQ0R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab4b00b3113a51c0265eee09a449e2fcf9b3f670521d5076822f3a4ee83df9f4N.exe

File Explorer

ab4b00b3113a51c0265eee09a449e2fcf9b3f670521d5076822f3a4ee83df9f4N.exe

.exe 497KB

ab4b00b3113a51c0265eee09a449e2fcf9b3f670521d5076822f3a4ee83df9f4N.exe

IMPHASH 18027003e68ded455b288db03553d6d2
SHA256 ab4b00b3113a51c0265eee09a449e2fcf9b3f670521d5076822f3a4ee83df9f4
MD5 cc7d1f9fd8dce5d2bfd3990517ae12c0
SHA1 164d108837876898d8c711974b95973559fb42ca
SHA512 dd48e8df42a2662dabd31e26bbba9f6857a6ca80bf02299457a12bc13a18ca43cfd67443422913cb3e5bf092ff0f9a0146762444f06f1da0fa4d9bf309a7914f
SSDEEP 6144:gY2wWL10g8MgLrtQM1GaddL+F3yaoeZlGAwFv0R:gY2wWR0gDguGghyadZFQ0R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18495

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileSectionNamesW SetDefaultCommConfigA CreateMutexW EnumCalendarInfoA GetStringTypeA GlobalCompact _llseek VerSetConditionMask GetConsoleAliasA WritePrivateProfileSectionA InterlockedCompareExchange WriteConsoleInputA BackupSeek GetModuleHandleW EnumCalendarInfoExW EnumTimeFormatsA GlobalAlloc LoadLibraryW TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA GetFileAttributesA TransactNamedPipe IsDBCSLeadByte lstrcmpW GlobalUnlock DeactivateActCtx FindFirstFileA SetLastError GetProcAddress GetFirmwareEnvironmentVariableW EnterCriticalSection GlobalGetAtomNameA SearchPathA ResetEvent OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW SetCurrentDirectoryW AddAtomA WaitForMultipleObjects EnumResourceTypesW FindNextFileA FindFirstVolumeMountPointA FreeEnvironmentStringsW GetCPInfoExA DeleteFileW CopyFileExA CloseHandle WriteConsoleW GetLastError WideCharToMultiByte HeapAlloc DeleteFileA EncodePointer DecodePointer ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetConsoleCtrlHandler GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy LeaveCriticalSection SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection Sleep HeapSize FatalAppExitA FreeLibrary InterlockedExchange GetLocaleInfoW GetModuleFileNameA GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW HeapFree IsProcessorFeaturePresent SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc CreateFileW

user32

LoadMenuW

Sharing