242a445f36c2d1de50800e43c54fcac18b1f56dbb82f2bb454c1742f8576260e[.]exe

General

Target
242a445f36c2d1de50800e43c54fcac18b1f56dbb82f2bb454c1742f8576260e.exe
Size 512KB
Sample241123-eksltsxph1
SHA256 242a445f36c2d1de50800e43c54fcac18b1f56dbb82f2bb454c1742f8576260e
MD5 a061047bde98fbc085243a50cba4c88f
SHA1 ddad8d3c9b67c8309a6b9c6f443130606679d821
SHA512 d222d1fa730fb2946512fef6d22f7da66cf5a6c11bf6ff7ef1b53910fc143b2cf84f112afc25ddc74eba77ad26241e9024aa71f3a3dc7b7aac5025cf65915b09
SSDEEP 12288:AkuuSP4H1DZXw6/yEMAmXDq54PWCks2D/FAvfSvwZGEX8cf:AtlCbbK1DzXPWnTFafSosEd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
242a445f36c2d1de50800e43c54fcac18b1f56dbb82f2bb454c1742f8576260e.exe

File Explorer

242a445f36c2d1de50800e43c54fcac18b1f56dbb82f2bb454c1742f8576260e.exe

.exe 512KB

242a445f36c2d1de50800e43c54fcac18b1f56dbb82f2bb454c1742f8576260e.exe

IMPHASH df9601abec2416ae7ecc0dd0d7272e84
SHA256 242a445f36c2d1de50800e43c54fcac18b1f56dbb82f2bb454c1742f8576260e
MD5 a061047bde98fbc085243a50cba4c88f
SHA1 ddad8d3c9b67c8309a6b9c6f443130606679d821
SHA512 d222d1fa730fb2946512fef6d22f7da66cf5a6c11bf6ff7ef1b53910fc143b2cf84f112afc25ddc74eba77ad26241e9024aa71f3a3dc7b7aac5025cf65915b09
SSDEEP 12288:AkuuSP4H1DZXw6/yEMAmXDq54PWCks2D/FAvfSvwZGEX8cf:AtlCbbK1DzXPWnTFafSosEd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8483

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fukimuciy_bewop\telexiwi_vevugi.pdb

kernel32

EndUpdateResourceW GetEnvironmentStringsW SetEvent FlushViewOfFile ReadConsoleW GlobalAlloc Sleep InitAtomTable HeapCreate WriteConsoleW GetAtomNameW GetModuleFileNameW CreateActCtxA SetConsoleTitleA SetProcessAffinityMask DeactivateActCtx SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW LoadLibraryA SetEnvironmentVariableA GetModuleFileNameA GetOEMCP CreateIoCompletionPort GetCPInfoExA SetProcessShutdownParameters Module32Next ReleaseMutex GetVersionExA FindNextVolumeA lstrcpyW LCMapStringW SetTapePosition HeapReAlloc IsProcessorFeaturePresent RaiseException EncodePointer DecodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapAlloc ReadFile EnterCriticalSection LeaveCriticalSection HeapFree SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP IsValidCodePage CloseHandle LoadLibraryW WriteFile FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar RtlUnwind SetStdHandle FlushFileBuffers GetStringTypeW HeapSize CreateFileW

user32

ClientToScreen

gdi32

GetBitmapBits

winhttp

WinHttpQueryOption

Sharing