b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c[.]exe

General

Target
b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c.exe
Size 401KB
Sample241124-lj8d8atpcv
SHA256 b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c
MD5 1109b55da15dc95c8d6887c559cd8f7e
SHA1 2053f81200e37b3c95933fd9e6b889b4fe83bd7e
SHA512 4edc64eea5b454699f84df01645b75387bb825935d16ab11af8dfb1229edc9549b25eec00e5684d2b0a4aef5e372e0acc05871178f72ee400dddbe86bcde6c2e
SSDEEP 6144:SIAvu3x1GEVMtDURIvEk3GaXBBQfAO0ITVY75z4XShqe+nPr1ljy:SIUu3XZVMtDBvXhkVRTVYlznqe+Pr1E
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c.exe

File Explorer

b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c.exe

.exe 401KB

b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c.exe

IMPHASH 225e0ad40cbe89f68a30c3a6a7705729
SHA256 b7d59a03bc8a405793ad211981c8e38d43884c56b1095470eaeb2b8d4bf7f00c
MD5 1109b55da15dc95c8d6887c559cd8f7e
SHA1 2053f81200e37b3c95933fd9e6b889b4fe83bd7e
SHA512 4edc64eea5b454699f84df01645b75387bb825935d16ab11af8dfb1229edc9549b25eec00e5684d2b0a4aef5e372e0acc05871178f72ee400dddbe86bcde6c2e
SSDEEP 6144:SIAvu3x1GEVMtDURIvEk3GaXBBQfAO0ITVY75z4XShqe+nPr1ljy:SIUu3XZVMtDBvXhkVRTVYlznqe+Pr1E
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

200240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hecuxapove\boduf\fugayigol-51-kisucaniwuv\coci\ponav mutolup.pdb

kernel32

ExitProcess InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA SetFileTime LoadLibraryW TerminateThread GetVersionExW IsBadWritePtr LocalHandle GetModuleFileNameW GetEnvironmentVariableA lstrlenW GetConsoleOutputCP SetCurrentDirectoryA GetStartupInfoA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA OpenWaitableTimerA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc WriteProfileSectionW GetModuleFileNameA GetOEMCP FreeEnvironmentStringsW CompareStringA SetProcessShutdownParameters SetFileShortNameA GetVersionExA GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CreateFileW GetCommandLineW HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection DecodePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement GetEnvironmentStringsW HeapValidate IsBadReadPtr TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile WideCharToMultiByte GetACP GetCPInfo IsValidCodePage OutputDebugStringA WriteConsoleW RtlUnwind HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree FlushFileBuffers GetConsoleCP GetConsoleMode GetStringTypeW LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent CloseHandle SetStdHandle RaiseException

user32

GetAltTabInfoW

Sharing