14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184[.]exe

General

Target
14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184.exe
Size 1.3MB
Sample241120-cj8wbasqgl
SHA256 14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184
MD5 dd862590d9e4ea1791df147912ae4c8f
SHA1 852d7a9ea4db5ff4cd51a92447a8d5701cfb322b
SHA512 3e9222d8bd91d3e53f5e378318a78a7c5aa12011272031f7c0d8c36c5b255db1d0a168cc02e1159eb021dd18206352dd6dcb857fefc2222937c467350dc6d568
SSDEEP 24576:pQrDp6J8JM3IgVvF7EtPCo1Frk5fRJhqYEjTvpAbHT0HRZonw4by:pQpI8JM3IwEtPCo1F45fvhq/jTyb4HR+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184.exe

File Explorer

14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184.exe

.dll 1.3MB

14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184.exe

IMPHASH 9a0edf641145d454a005af877887e965
SHA256 14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184
MD5 dd862590d9e4ea1791df147912ae4c8f
SHA1 852d7a9ea4db5ff4cd51a92447a8d5701cfb322b
SHA512 3e9222d8bd91d3e53f5e378318a78a7c5aa12011272031f7c0d8c36c5b255db1d0a168cc02e1159eb021dd18206352dd6dcb857fefc2222937c467350dc6d568
SSDEEP 24576:pQrDp6J8JM3IgVvF7EtPCo1Frk5fRJhqYEjTvpAbHT0HRZonw4by:pQpI8JM3IwEtPCo1F45fvhq/jTyb4HR+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

790064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

edb.pdb

kernel32

GetFileSize DeleteFileW GetTempPathW FlushFileBuffers GetFileInformationByHandle LockFileEx UnlockFileEx GetSystemTimeAsFileTime DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection SetFilePointer LoadLibraryW GetProcAddress FreeLibrary GetCurrentProcess GetLocaleInfoW GetModuleFileNameW LoadLibraryExW WideCharToMultiByte MultiByteToWideChar GetFullPathNameW WriteConsoleW GetConsoleMode GetConsoleOutputCP HeapSize SetStdHandle GetStringTypeW SetEndOfFile WriteFile ReadFile FindClose FindNextFileW FindFirstFileExW Sleep GetLastError GetCurrentProcessId GetModuleHandleW GetTickCount InitializeCriticalSection SetLastError RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetStdHandle GetFileType IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap

Sharing