4d2e23a579e1cac93ec8986e9dd88f6b640b36aa918952eed78ec7c62b8c79bfN[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
4d2e23a579e1cac93ec8986e9dd88f6b640b36aa918952eed78ec7c62b8c79bfN.exe
Size 61KB
Sample241113-z2fntazake
SHA256 804ceedb4da459b12a480e99c2de2f2b0d248c0e9a928ce8746bd970e745fb8c
MD5 fcab8db6a0da3dbc2212a61774e8927c
SHA1 72194bcca73be4e3fb42e29b9563ab60b63d2861
SHA512 95d328bc27dafa155105bea11e6759f7caafc64ff8389d777c93b44effa1f40c123e6e2d38f4b66baed95481a690971f3bdb0509b611de18cc28f31bc885e86b
SSDEEP 1536:UE3HjO+qAAM0ib/fY9npdwLMKcTbImrvcBsFWMmu:jDY9pqLnc9rUBumu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d2e23a579e1cac93ec8986e9dd88f6b640b36aa918952eed78ec7c62b8c79bfN.exe

File Explorer

4d2e23a579e1cac93ec8986e9dd88f6b640b36aa918952eed78ec7c62b8c79bfN.exe

.exe 61KB

4d2e23a579e1cac93ec8986e9dd88f6b640b36aa918952eed78ec7c62b8c79bfN.exe

IMPHASH 64a84b87addc4b9998a159bb52ca7c69
SHA256 804ceedb4da459b12a480e99c2de2f2b0d248c0e9a928ce8746bd970e745fb8c
MD5 fcab8db6a0da3dbc2212a61774e8927c
SHA1 72194bcca73be4e3fb42e29b9563ab60b63d2861
SHA512 95d328bc27dafa155105bea11e6759f7caafc64ff8389d777c93b44effa1f40c123e6e2d38f4b66baed95481a690971f3bdb0509b611de18cc28f31bc885e86b
SSDEEP 1536:UE3HjO+qAAM0ib/fY9npdwLMKcTbImrvcBsFWMmu:jDY9pqLnc9rUBumu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

crtdll

memset strlen _strnicmp strncmp strncpy strcpy atof strcat localtime mktime gmtime

user32

wsprintfA KillTimer SetTimer wvsprintfA GetWindowThreadProcessId MessageBoxA IsWindowVisible IsWindowEnabled GetForegroundWindow EnableWindow EnumWindows GetWindowLongA CallWindowProcA DefWindowProcA SetWindowLongA SetWindowTextA DestroyWindow SendMessageA CreateWindowExA LoadCursorA LoadIconA RegisterClassA GetSysColor PeekMessageA GetActiveWindow TranslateAcceleratorA TranslateMessage DispatchMessageA AdjustWindowRect GetSystemMetrics GetWindowRect ShowWindow GetMessageA GetClassNameA PostMessageA GetParent GetWindow SetWindowPos SetFocus SetActiveWindow UnregisterClassA DestroyAcceleratorTable GetFocus IsChild EnumChildWindows GetKeyState CreateAcceleratorTableA SetCursorPos LoadImageA SetCursor SystemParametersInfoA SetCapture GetCursorPos MapWindowPoints ReleaseCapture MoveWindow

advapi32

RegCreateKeyA RegSetValueExA RegCloseKey

wininet

InternetOpenA InternetOpenUrlA InternetReadFile InternetCloseHandle

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

SysAllocStringLen SysFreeString SysAllocString

urlmon

URLDownloadToFileA

gdi32

GetStockObject CreateBrushIndirect

comctl32

InitCommonControls

kernel32

GetModuleHandleA GetCommandLineA ExitProcess HeapCreate GetSystemDirectoryA GetModuleFileNameA GetEnvironmentVariableA GetCurrentDirectoryA SystemTimeToFileTime GetFileAttributesA SetFileAttributesA CreateFileA SetFileTime CloseHandle GetFileTime HeapDestroy HeapReAlloc FreeLibrary GetProcAddress HeapAlloc LoadLibraryA IsBadReadPtr HeapFree GlobalAlloc OpenProcess GetLastError FormatMessageA GlobalFree GetCurrentThreadId GetCurrentProcessId MultiByteToWideChar WideCharToMultiByte SetUnhandledExceptionFilter GetVersionExA WaitForSingleObject GetTickCount Sleep FindClose FindFirstFileA FindNextFileA ReadFile SetFilePointer GetFileSize WriteFile GetLocalTime

shell32

ShellExecuteExA