f48a6af6076cc8114295224bafcbc66f7cf5fe4a3a2439f2df1a6d3c7fa97cb4N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
f48a6af6076cc8114295224bafcbc66f7cf5fe4a3a2439f2df1a6d3c7fa97cb4N.exe
Size 277KB
Sample241118-e9x8lsycpd
SHA256 f48a6af6076cc8114295224bafcbc66f7cf5fe4a3a2439f2df1a6d3c7fa97cb4
MD5 c686f2bc3741d5768f11c427cb01cf50
SHA1 17bdad32519833b054359c96c0370ff248c8324a
SHA512 bf26432c84d6bbaf4341f27e08e0e1074bf666f33d551a0090c9dad5f67da8797f8622fb1cd1ac77938cbe33004f048fa245d18c7c50c33a83fbafcdf2dbba07
SSDEEP 3072:4A+sgUHniUYJ+vYaFpYpE86BSkuIo2RX+SnsK+MEANDlN6qOncZuH5/vJwYPDpJc:nBM+vJ8NHIpz5pDQOupv2YPDWJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f48a6af6076cc8114295224bafcbc66f7cf5fe4a3a2439f2df1a6d3c7fa97cb4N.exe

File Explorer

f48a6af6076cc8114295224bafcbc66f7cf5fe4a3a2439f2df1a6d3c7fa97cb4N.exe

.exe 277KB

f48a6af6076cc8114295224bafcbc66f7cf5fe4a3a2439f2df1a6d3c7fa97cb4N.exe

IMPHASH ce616e1524d84196ce99affa2a76819d
SHA256 f48a6af6076cc8114295224bafcbc66f7cf5fe4a3a2439f2df1a6d3c7fa97cb4
MD5 c686f2bc3741d5768f11c427cb01cf50
SHA1 17bdad32519833b054359c96c0370ff248c8324a
SHA512 bf26432c84d6bbaf4341f27e08e0e1074bf666f33d551a0090c9dad5f67da8797f8622fb1cd1ac77938cbe33004f048fa245d18c7c50c33a83fbafcdf2dbba07
SSDEEP 3072:4A+sgUHniUYJ+vYaFpYpE86BSkuIo2RX+SnsK+MEANDlN6qOncZuH5/vJwYPDpJc:nBM+vJ8NHIpz5pDQOupv2YPDWJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18579

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\payacuf\w.pdb

kernel32

ScrollConsoleScreenBufferW UnlockFile GetLogicalDrives GetModuleHandleW EnumCalendarInfoExW VirtualFree GetWindowsDirectoryA EnumTimeFormatsA EnumTimeFormatsW EnumResourceTypesA GetFileAttributesA EnumSystemLocalesA GetCPInfoExW GetLastError GetProcAddress VirtualAlloc RemoveDirectoryA _hwrite LoadLibraryA WriteConsoleA InterlockedExchangeAdd CreateFileMappingA LocalAlloc BeginUpdateResourceA PostQueuedCompletionStatus WriteProfileSectionW FindFirstChangeNotificationA VirtualProtect OpenEventW GetCPInfoExA AddConsoleAliasA FindNextVolumeA RaiseException CopyFileExW CreateMemoryResourceNotification GetConsoleAliasesLengthW HeapSize RtlUnwind MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc GetModuleHandleA

user32

RegisterClassA CharLowerBuffW

gdi32

GetCharWidthI GetCharWidthW

ole32

CoGetPSClsid

winhttp

WinHttpOpen