93f4ad4c63b3a95977db19f6130c4f02c0968b3e272e15b050e8782a4fa5b9f4[.]exe

General

Target
93f4ad4c63b3a95977db19f6130c4f02c0968b3e272e15b050e8782a4fa5b9f4.exe
Size 284KB
Sample241124-d6f99aykcm
SHA256 93f4ad4c63b3a95977db19f6130c4f02c0968b3e272e15b050e8782a4fa5b9f4
MD5 4e5eaedd88f3546685f4cc55e36ea0fa
SHA1 0cc3a3aed941c22b0d5f430096b0feccb83a4b18
SHA512 b42e39951c78bb8620247ac26b8eab7f19a2bdc09baf7ef59f42efa3dd8797cd8e600a190d25860dce644260d877ae7216883ccdf6ae2b92d6e8663d696b0591
SSDEEP 6144:wnfl1dIBXiMWXZT24SGTAYlDvC2zivJDg060759lrtEum:QfqApGuRhvfMgbg59lr0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93f4ad4c63b3a95977db19f6130c4f02c0968b3e272e15b050e8782a4fa5b9f4.exe

File Explorer

93f4ad4c63b3a95977db19f6130c4f02c0968b3e272e15b050e8782a4fa5b9f4.exe

.exe 284KB

93f4ad4c63b3a95977db19f6130c4f02c0968b3e272e15b050e8782a4fa5b9f4.exe

IMPHASH 0aa8675e96bbc2351e2af940f447c93e
SHA256 93f4ad4c63b3a95977db19f6130c4f02c0968b3e272e15b050e8782a4fa5b9f4
MD5 4e5eaedd88f3546685f4cc55e36ea0fa
SHA1 0cc3a3aed941c22b0d5f430096b0feccb83a4b18
SHA512 b42e39951c78bb8620247ac26b8eab7f19a2bdc09baf7ef59f42efa3dd8797cd8e600a190d25860dce644260d877ae7216883ccdf6ae2b92d6e8663d696b0591
SSDEEP 6144:wnfl1dIBXiMWXZT24SGTAYlDvC2zivJDg060759lrtEum:QfqApGuRhvfMgbg59lr0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

103040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wefop.pdb

kernel32

SearchPathW GetConsoleAliasesLengthW GetCPInfo InterlockedDecrement AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW GetTickCount SetFileTime CreateActCtxW GlobalAlloc SetFileShortNameW GetConsoleMode TerminateThread GetVersionExW IsBadWritePtr GetEnvironmentVariableA CompareStringW ExitThread lstrlenW VerifyVersionInfoW GetStartupInfoA FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress CopyFileA LockFileEx OpenWaitableTimerA ProcessIdToSessionId MoveFileA SetCurrentDirectoryW WriteProfileSectionW GlobalGetAtomNameW GetModuleFileNameA WriteProfileStringA GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW ScrollConsoleScreenBufferA TlsAlloc GetWindowsDirectoryW DeleteFileW LocalFileTimeToFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA HeapValidate IsBadReadPtr RaiseException Sleep InterlockedIncrement ExitProcess GetLastError WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

winhttp

WinHttpReadData

Sharing