3035705002f46bc1ca67407006490b442059ea822d60c68b801b27c332638322[.]exe

General

Target
3035705002f46bc1ca67407006490b442059ea822d60c68b801b27c332638322.exe
Size 1.4MB
Sample241124-anfdfszrfp
SHA256 3035705002f46bc1ca67407006490b442059ea822d60c68b801b27c332638322
MD5 c573d8c93af3e0867a7f8365e8d56882
SHA1 d9228e8d9da76a70caa9d879dbe42d35796473af
SHA512 51b406a946a06dd0474728e89473a76db4951e402f97081505ab6f94e92ff2e534f8057a248a4a92d4acab99d5ea33b89d03fab073ef736a9b8616f0cb52c159
SSDEEP 24576:rAOcZEhNWxlG7m4/9eBcA4CCEti0POqh/0rEOTq6ai0bagi7xa5S:tyxlk9eBVlCGVPOwOTq6d4a5w8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3035705002f46bc1ca67407006490b442059ea822d60c68b801b27c332638322.exe

File Explorer

3035705002f46bc1ca67407006490b442059ea822d60c68b801b27c332638322.exe

.exe 1.4MB

3035705002f46bc1ca67407006490b442059ea822d60c68b801b27c332638322.exe

IMPHASH fcf1390e9ce472c7270447fc5c61a0c1
SHA256 3035705002f46bc1ca67407006490b442059ea822d60c68b801b27c332638322
MD5 c573d8c93af3e0867a7f8365e8d56882
SHA1 d9228e8d9da76a70caa9d879dbe42d35796473af
SHA512 51b406a946a06dd0474728e89473a76db4951e402f97081505ab6f94e92ff2e534f8057a248a4a92d4acab99d5ea33b89d03fab073ef736a9b8616f0cb52c159
SSDEEP 24576:rAOcZEhNWxlG7m4/9eBcA4CCEti0POqh/0rEOTq6ai0bagi7xa5S:tyxlk9eBVlCGVPOwOTq6d4a5w8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError FormatMessageW GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc LockResource GlobalLock GlobalUnlock GlobalFree LoadResource SizeofResource SetCurrentDirectoryW GetExitCodeProcess GetLocalTime GetTickCount MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

gdiplus

GdiplusShutdown GdiplusStartup GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipFree GdipAlloc

Sharing