35913d7515db8a3ddde7b029abad91099f5694fdff0882897c8b4b639e8aae71[.]exe

General

Target
35913d7515db8a3ddde7b029abad91099f5694fdff0882897c8b4b639e8aae71.exe
Size 423KB
Sample241125-3rxfcszjer
SHA256 35913d7515db8a3ddde7b029abad91099f5694fdff0882897c8b4b639e8aae71
MD5 259eab13e07f37333da4a5538565304c
SHA1 f8b278833ccf8e3df91dff0ba0c78ad18cb8bc81
SHA512 c63708528648a094c9e7f0777245259e1d59141be65034cc6a5217f8be5d5490470d2caf1971d0d928de93af819af7a858df8d0ddcaaacd865435b904d96f88a
SSDEEP 12288:snzOTW1Ig1hxgsjtuEiJ+F9kuwL/1ZBuK2zDcUX3XSP9me:eEW1SEiUFZwLdZSDcUXSAe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35913d7515db8a3ddde7b029abad91099f5694fdff0882897c8b4b639e8aae71.exe

File Explorer

35913d7515db8a3ddde7b029abad91099f5694fdff0882897c8b4b639e8aae71.exe

.dll 423KB

35913d7515db8a3ddde7b029abad91099f5694fdff0882897c8b4b639e8aae71.exe

IMPHASH 3404930783fa1620e9f519a7ecde3361
SHA256 35913d7515db8a3ddde7b029abad91099f5694fdff0882897c8b4b639e8aae71
MD5 259eab13e07f37333da4a5538565304c
SHA1 f8b278833ccf8e3df91dff0ba0c78ad18cb8bc81
SHA512 c63708528648a094c9e7f0777245259e1d59141be65034cc6a5217f8be5d5490470d2caf1971d0d928de93af819af7a858df8d0ddcaaacd865435b904d96f88a
SSDEEP 12288:snzOTW1Ig1hxgsjtuEiJ+F9kuwL/1ZBuK2zDcUX3XSP9me:eEW1SEiUFZwLdZSDcUXSAe
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

15489

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

B:\cliprgn_src\Release\ClipRgn.pdb

kernel32

ReadConsoleW ReadFile SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc HeapSize GetStringTypeW SetConsoleCtrlHandler OutputDebugStringW GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar CreateFileW CloseHandle WriteConsoleW IsBadReadPtr FreeLibrary VirtualQuery VirtualFree VirtualProtect GetNativeSystemInfo GetProcessHeap HeapFree HeapAlloc SetLastError LoadLibraryA GetProcAddress VirtualAllocExNuma VirtualAlloc GetVersionExA GetCurrentProcess GetFileType WriteFileGather IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetCurrentThread FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW DecodePointer

user32

CheckMenuRadioItem GetClassLongA FillRect MapWindowPoints MessageBoxA GetClientRect RedrawWindow ValidateRect EndPaint BeginPaint ReleaseDC GetDCEx GetDC UpdateWindow LoadCursorA CheckMenuItem GetMenuState GetMenu ShowWindow DestroyWindow CreateWindowExA RegisterClassExA PostQuitMessage DefWindowProcA SendMessageA DispatchMessageA TranslateMessage GetMessageA LoadStringA GetSubMenu

gdi32

MoveToEx PathToRegion EndPath CloseFigure BeginPath SelectObject SetMetaRgn SelectClipRgn SaveDC RestoreDC OffsetRgn LineTo FrameRgn DeleteObject CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreatePen CreateEllipticRgnIndirect CombineRgn

Sharing