3d7fc74a7388dc32015d9d5f1e4fdec75ccb18549129c720d6f62c81f0ca2b6fN[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
3d7fc74a7388dc32015d9d5f1e4fdec75ccb18549129c720d6f62c81f0ca2b6fN.exe
Size 217KB
Sample241123-ej8lnatpep
SHA256 3d7fc74a7388dc32015d9d5f1e4fdec75ccb18549129c720d6f62c81f0ca2b6f
MD5 e67b9930cd83aaa1d5cc36546b94a030
SHA1 a39dedc0052c4b9140ceb90b04162d4cb84c7351
SHA512 51b3dc49a4cfdf1f6524955556b85382e102241740789b7b70e914c9e4a7116defbc54722430a28754f1f0ccc614eafdeb11b424ecfa70dcac6577293e7f58e0
SSDEEP 6144:unyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXb5:HEdp8csKpE7XXo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d7fc74a7388dc32015d9d5f1e4fdec75ccb18549129c720d6f62c81f0ca2b6fN.exe

File Explorer

3d7fc74a7388dc32015d9d5f1e4fdec75ccb18549129c720d6f62c81f0ca2b6fN.exe

.exe 217KB

3d7fc74a7388dc32015d9d5f1e4fdec75ccb18549129c720d6f62c81f0ca2b6fN.exe

IMPHASH 752e1ad839fdd9d87e202c92c2bee710
SHA256 3d7fc74a7388dc32015d9d5f1e4fdec75ccb18549129c720d6f62c81f0ca2b6f
MD5 e67b9930cd83aaa1d5cc36546b94a030
SHA1 a39dedc0052c4b9140ceb90b04162d4cb84c7351
SHA512 51b3dc49a4cfdf1f6524955556b85382e102241740789b7b70e914c9e4a7116defbc54722430a28754f1f0ccc614eafdeb11b424ecfa70dcac6577293e7f58e0
SSDEEP 6144:unyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXb5:HEdp8csKpE7XXo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61051

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLangID EnumDateFormatsW GetLogicalDrives lstrlen lstrcpynW GetDateFormatW GetEnvironmentStringsW GetVersionExA SetThreadPriority LocalAlloc GetAtomNameA GetShortPathNameW LoadLibraryA GetWindowsDirectoryW GetEnvironmentVariableA AddAtomA GetDiskFreeSpaceA GlobalFindAtomA GetModuleFileNameA GetHandleInformation GetModuleHandleA CompareFileTime MoveFileA SearchPathW GetLogicalDriveStringsA SetPriorityClass OpenProcess FatalAppExitA GetLongPathNameW IsValidCodePage IsDebuggerPresent lstrcmpW GetProcAddress SetCurrentDirectoryA GetShortPathNameA LoadLibraryW SetErrorMode RaiseException EndUpdateResourceA

user32

GetWindowRgn GetMenuItemInfoA GetClassInfoA GetMenu LoadMenuIndirectW UpdateWindow ClientToScreen WaitMessage FrameRect ArrangeIconicWindows CreatePopupMenu GetMenuStringA MessageBoxIndirectW RegisterClassExA WaitForInputIdle CreateDialogIndirectParamW FlashWindow GetMenuItemInfoW EnumDesktopsW IsChild EmptyClipboard CreateDialogParamW EnumDesktopsA DialogBoxIndirectParamA EndDialog CharNextW DefDlgProcW IsWindow DrawTextW PeekMessageA GetWindowRect ReleaseDC

gdi32

GetPath CreateSolidBrush GetRgnBox SetMiterLimit SetBrushOrgEx GetMetaRgn GetDeviceGammaRamp GetDeviceCaps FrameRgn CreateFontIndirectA OffsetClipRgn GetCharWidth32A AnimatePalette SetDCBrushColor UpdateICMRegKeyA SetLayout FillRgn CreateMetaFileA PtVisible GetEnhMetaFilePaletteEntries ExtEscape EndPath GetClipBox

advapi32

RegReplaceKeyW RegCreateKeyExW RegSaveKeyW RegEnumValueA RegDeleteValueW RegQueryValueExW RegEnumKeyW RegReplaceKeyA RegRestoreKeyW RegSetValueW

shlwapi

SHSkipJunction UrlCanonicalizeA DllGetVersion PathIsPrefixA PathParseIconLocationA

wininet

InternetSetPerSiteCookieDecisionW InternetSetOptionW InternetSetCookieW FindNextUrlCacheContainerA FindFirstUrlCacheEntryW InternetWriteFileExW CreateUrlCacheContainerA FtpCommandA InternetCanonicalizeUrlW InternetAutodial GopherCreateLocatorW InternetSetOptionExA DeleteIE3Cache HttpEndRequestW InternetCrackUrlW FtpSetCurrentDirectoryA

winspool.drv

QuerySpoolMode AddPrinterW OpenPrinterW GetDefaultPrinterW DocumentPropertiesW AddPortExA AbortPrinter SetPrinterDataA SetPrinterW

inetcomm

MimeEditDocumentFromStream HrDoAttachmentVerb MimeOleGetFileInfo MimeOleCreateHashTable MimeGetAddressFormatW MimeOleSMimeCapsToDlg MimeOleAlgStrengthFromSMimeCap CreateNNTPTransport

oledlg

OleUIChangeSourceA OleUIPasteSpecialW OleUIUpdateLinksW OleUIPromptUserW OleUIObjectPropertiesW OleUIConvertA OleUIChangeSourceW OleUIAddVerbMenuW OleUIInsertObjectW

wsock32

WSAAsyncGetProtoByNumber recv htons AcceptEx recvfrom GetAcceptExSockaddrs WSAStartup rexec TransmitFile gethostbyname

crypt32

CertNameToStrW CertGetValidUsages CertGetEnhancedKeyUsage CertAddCertificateContextToStore CryptSIPRemoveProvider CryptGetDefaultOIDFunctionAddress CryptBinaryToStringW CryptAcquireCertificatePrivateKey CryptUnregisterOIDInfo

Name

.rdata

Size

1KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

1KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

33KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.edata

Size

1KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

11KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

23KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.edata

Size

1KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

172KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3d7fc74a7388dc32015d9d5f1e4fdec75ccb18549129c720d6f62c81f0ca2b6fN.exe

kernel32

user32

gdi32

advapi32

shlwapi

wininet

winspool.drv

inetcomm

oledlg

wsock32

crypt32

generic