e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54[.]exe

Resubmissions

21/11/2024, 22:49

241121-2rmqgsyncx10

21/11/2024, 22:48

241121-2q8xbsyncv10

21/11/2024, 22:47

241121-2q17gsynb110

21/11/2024, 20:46

241121-zkkw7sxnbv10

Sharing

Copy URL Twitter E-mail

General

Target
e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54.exe
Size 460KB
Sample241121-2rmqgsyncx
SHA256 e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54
MD5 1ea6c706135b5f269892ce08293181ba
SHA1 18b8fc98df365b795fdf74eede58e53590084b75
SHA512 81874e1314077b56782a59625db33297955d0b47514ed9115d6f0584af7b31250fa69c985e93f1c5b67c3d4c3a790a5dc3ba28325f5b8952f8e0b0bfb3e53f99
SSDEEP 6144:b96ZhRWIiMiCIF1DXBVmdCeyNAxR/oLgC+j9Jbnndik1IysdF3bQQYs8bt:b96Z/niySBVmZy2vuMJJr8k1IysdZcQq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54.exe

File Explorer

e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54.exe

.exe 460KB

e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54.exe

IMPHASH 80d506598da867a09b35bc1fdb2d74ee
SHA256 e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54
MD5 1ea6c706135b5f269892ce08293181ba
SHA1 18b8fc98df365b795fdf74eede58e53590084b75
SHA512 81874e1314077b56782a59625db33297955d0b47514ed9115d6f0584af7b31250fa69c985e93f1c5b67c3d4c3a790a5dc3ba28325f5b8952f8e0b0bfb3e53f99
SSDEEP 6144:b96ZhRWIiMiCIF1DXBVmdCeyNAxR/oLgC+j9Jbnndik1IysdF3bQQYs8bt:b96Z/niySBVmZy2vuMJJr8k1IysdZcQq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA HeapFree TerminateProcess GetCommandLineA GetStartupInfoA HeapAlloc RtlUnwind FormatMessageA GetFileTime GetFileSize GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle SetErrorMode GetOEMCP GetCPInfo GetThreadLocale GetProcessVersion GetLastError SetLastError MultiByteToWideChar WideCharToMultiByte InterlockedIncrement WritePrivateProfileStringA GlobalFlags MulDiv lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc InterlockedDecrement lstrlenA GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CloseHandle GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId FreeLibrary LoadLibraryA ExitProcess GetFileType GetProcAddress

user32

CharUpperA RegisterClipboardFormatA PostThreadMessageA LoadStringA GetSysColorBrush GrayStringA DrawTextA TabbedTextOutA GetWindowDC GetClassNameA ClientToScreen GetDesktopWindow ShowWindow MoveWindow SetWindowTextA IsDialogMessageA SendDlgItemMessageA MapWindowPoints GetSysColor AdjustWindowRectEx GetClientRect CopyRect DestroyMenu GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect SystemParametersInfoA IsIconic GetWindowPlacement MapDialogRect GetWindow SetWindowContextHelpId EndDialog SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem MessageBeep GetNextDlgGroupItem SetRect CopyAcceleratorTableA CharNextA GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow CallNextHookEx ValidateRect IsWindowVisible PeekMessageA SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled MessageBoxA PostQuitMessage PostMessageA GetFocus SetFocus ReleaseCapture GetDC ReleaseDC ScreenToClient IsWindow BringWindowToTop LoadCursorA SetCursor InvalidateRect UpdateWindow GetCursorPos GetWindowRect GetKeyState GetWindowLongA PtInRect LoadIconA SendMessageA SetWindowPos EnableWindow GetMenu UnregisterClassA

gdi32

PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextColor GetBkColor DPtoLP GetMapMode ScaleWindowExtEx GetWindowExtEx GetViewportExtEx GetDeviceCaps LPtoDP LineTo SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode GetStockObject SelectObject RestoreDC SaveDC DeleteDC DeleteObject GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap MoveToEx

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegCreateKeyExA RegOpenKeyExA RegSetValueExA RegCloseKey

shell32

SHGetFileInfoA

comctl32

ord17 ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries OleInitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard OleUninitialize

olepro32

ord253

oleaut32

SysStringLen SysAllocStringByteLen SysAllocString VariantChangeType VariantCopy VariantTimeToSystemTime VariantClear SysAllocStringLen SysFreeString