cb9e4da68833eaae68a51238bba45d6595df5304f61dd68dfd73a32fec1a0fed[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
cb9e4da68833eaae68a51238bba45d6595df5304f61dd68dfd73a32fec1a0fed.exe
Size 277KB
Sample241118-ear8baxeka
SHA256 cb9e4da68833eaae68a51238bba45d6595df5304f61dd68dfd73a32fec1a0fed
MD5 3c2d05604d9922dd6b9f1b4c02c61b3c
SHA1 aef0d2559fc8cd36677d75cd6b0acdecc38c47a2
SHA512 e8775b3f8baa4838f56e9e8c55b9b73c5bf9d10f5bd2ba7e4553b2251f7c4015ebee84b2c06bb83259ac6999eedecdb12a6ee0844cff7a0dbd208f63ef5d3dca
SSDEEP 3072:1h+tAUHXSwntx7nmciFYMI8mU90fy2ME0n/gJCYbBUlvWN5/sBOwYPDpJKJRfyI+:2xSeMFYtMz/ghU52sBXYPDWJA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb9e4da68833eaae68a51238bba45d6595df5304f61dd68dfd73a32fec1a0fed.exe

File Explorer

cb9e4da68833eaae68a51238bba45d6595df5304f61dd68dfd73a32fec1a0fed.exe

.exe 277KB

cb9e4da68833eaae68a51238bba45d6595df5304f61dd68dfd73a32fec1a0fed.exe

IMPHASH ce616e1524d84196ce99affa2a76819d
SHA256 cb9e4da68833eaae68a51238bba45d6595df5304f61dd68dfd73a32fec1a0fed
MD5 3c2d05604d9922dd6b9f1b4c02c61b3c
SHA1 aef0d2559fc8cd36677d75cd6b0acdecc38c47a2
SHA512 e8775b3f8baa4838f56e9e8c55b9b73c5bf9d10f5bd2ba7e4553b2251f7c4015ebee84b2c06bb83259ac6999eedecdb12a6ee0844cff7a0dbd208f63ef5d3dca
SSDEEP 3072:1h+tAUHXSwntx7nmciFYMI8mU90fy2ME0n/gJCYbBUlvWN5/sBOwYPDpJKJRfyI+:2xSeMFYtMz/ghU52sBXYPDWJA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18579

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fuj.pdb

kernel32

ScrollConsoleScreenBufferW UnlockFile GetLogicalDrives GetModuleHandleW EnumCalendarInfoExW VirtualFree GetWindowsDirectoryA EnumTimeFormatsA EnumTimeFormatsW EnumResourceTypesA GetFileAttributesA EnumSystemLocalesA GetCPInfoExW GetLastError GetProcAddress VirtualAlloc RemoveDirectoryA _hwrite LoadLibraryA WriteConsoleA InterlockedExchangeAdd CreateFileMappingA LocalAlloc BeginUpdateResourceA PostQueuedCompletionStatus WriteProfileSectionW FindFirstChangeNotificationA VirtualProtect OpenEventW GetCPInfoExA AddConsoleAliasA FindNextVolumeA RaiseException CopyFileExW CreateMemoryResourceNotification GetConsoleAliasesLengthW HeapSize RtlUnwind MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc GetModuleHandleA

user32

RegisterClassA CharLowerBuffW

gdi32

GetCharWidthI GetCharWidthW

ole32

CoGetPSClsid

winhttp

WinHttpOpen