b9ff399145316f5e8cb4cd01288d153896a1219b1a4d3feac906be99a698684eN[.]exe

General

Target
b9ff399145316f5e8cb4cd01288d153896a1219b1a4d3feac906be99a698684eN.exe
Size 391KB
Sample241118-emmtcsxpax
SHA256 b9ff399145316f5e8cb4cd01288d153896a1219b1a4d3feac906be99a698684e
MD5 27821c8ae9057007e7796538bbe1c9b0
SHA1 8c701fb8298cda04cee8e8a04340ce508e08dbba
SHA512 1e22a537f8a0c6998030cbb0a62c6508cbeb0be43f47be484502a927b479dd4cd9fa83cf61dd82d96e8c0c621aeaa5620855af22710a9bf4dca96958e32f752c
SSDEEP 6144:x+ISz1iadJyThR1deYrPvhIZc6c0kp5OogMqa97/QQa:xw5rdmh3kYj5IvKp5JgMT8Qa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ff399145316f5e8cb4cd01288d153896a1219b1a4d3feac906be99a698684eN.exe

File Explorer

b9ff399145316f5e8cb4cd01288d153896a1219b1a4d3feac906be99a698684eN.exe

.exe 391KB

b9ff399145316f5e8cb4cd01288d153896a1219b1a4d3feac906be99a698684eN.exe

IMPHASH 4aaa649ca28372dc2b8b8b59b7bed95e
SHA256 b9ff399145316f5e8cb4cd01288d153896a1219b1a4d3feac906be99a698684e
MD5 27821c8ae9057007e7796538bbe1c9b0
SHA1 8c701fb8298cda04cee8e8a04340ce508e08dbba
SHA512 1e22a537f8a0c6998030cbb0a62c6508cbeb0be43f47be484502a927b479dd4cd9fa83cf61dd82d96e8c0c621aeaa5620855af22710a9bf4dca96958e32f752c
SSDEEP 6144:x+ISz1iadJyThR1deYrPvhIZc6c0kp5OogMqa97/QQa:xw5rdmh3kYj5IvKp5JgMT8Qa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

43411

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA RtlCaptureContext GlobalCompact InterlockedIncrement GetConsoleAliasA QueryDosDeviceA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW FreeEnvironmentStringsA GetTickCount FindNextVolumeMountPointA GetConsoleAliasesLengthA SetCommState GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW IsProcessInJob GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesW GetModuleFileNameW SetTapePosition GetNamedPipeHandleStateW GetLastError CreateMutexW BeginUpdateResourceW CreateJobSet Process32FirstW UnhandledExceptionFilter BuildCommDCBAndTimeoutsW RemoveDirectoryW SetThreadIdealProcessor FindAtomA FoldStringA EnumResourceTypesW FindFirstVolumeMountPointA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask SetFileShortNameA DeleteFileW GetConsoleProcessList DebugBreak InterlockedPushEntrySList EnumSystemLocalesW CreateFileW WriteConsoleW FlushFileBuffers GetProcAddress GlobalFix GetConsoleMode SetStdHandle WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy GetModuleHandleW ExitProcess WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary DeleteFileA

user32

DefDlgProcA GetMenuBarInfo

advapi32

ReportEventW

shell32

FindExecutableA

Sharing