3578d0ef50e53848b45330145c00005713cd7e2291fb6753cad40f80c55d000eN[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
3578d0ef50e53848b45330145c00005713cd7e2291fb6753cad40f80c55d000eN.exe
Size 237KB
Sample250104-vr15js1kcl
SHA256 3578d0ef50e53848b45330145c00005713cd7e2291fb6753cad40f80c55d000e
MD5 4f17fa93bb077f7ba94b59e2f214d5d0
SHA1 a592f01f8db20298d9dc9bb34dd2cc1a868d7433
SHA512 f06f5bd59ea3ed773c721ec4e63cd8a19a36a9be4831bff11eb86774bef60ac731ce6d2b66369ab682508d27b8cb992242ae952f191fe88091eea676c05e8bd6
SSDEEP 6144:1A2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:1ATuTAnKGwUAWVycQqgr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3578d0ef50e53848b45330145c00005713cd7e2291fb6753cad40f80c55d000eN.exe

File Explorer

3578d0ef50e53848b45330145c00005713cd7e2291fb6753cad40f80c55d000eN.exe

.exe 237KB

3578d0ef50e53848b45330145c00005713cd7e2291fb6753cad40f80c55d000eN.exe

IMPHASH eb29527bc4a3140f4ce75eb5d2954101
SHA256 3578d0ef50e53848b45330145c00005713cd7e2291fb6753cad40f80c55d000e
MD5 4f17fa93bb077f7ba94b59e2f214d5d0
SHA1 a592f01f8db20298d9dc9bb34dd2cc1a868d7433
SHA512 f06f5bd59ea3ed773c721ec4e63cd8a19a36a9be4831bff11eb86774bef60ac731ce6d2b66369ab682508d27b8cb992242ae952f191fe88091eea676c05e8bd6
SSDEEP 6144:1A2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:1ATuTAnKGwUAWVycQqgr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16448

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_AGGRESIVE_WS_TRIM IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_NET_RUN_FROM_SWAP IMAGE_FILE_UP_SYSTEM_ONLY

PDB paths

kernel32

lstrcpyA CloseHandle CreateFileW FlushFileBuffers LCMapStringW GetStringTypeW SetStdHandle RtlUnwind HeapFree HeapQueryInformation HeapSize HeapReAlloc LoadLibraryW OutputDebugStringW WriteConsoleW OutputDebugStringA IsValidCodePage GetCPInfo GetOEMCP GetACP GetConsoleMode GetConsoleCP SetFilePointer WriteFile OpenEventW TlsFree TlsSetValue TlsGetValue TlsAlloc DeleteCriticalSection GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA ExitProcess GetModuleHandleW GetProcAddress InterlockedDecrement InterlockedIncrement GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter LeaveCriticalSection EnterCriticalSection IsBadReadPtr HeapValidate GetModuleFileNameW EncodePointer DecodePointer IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW FillConsoleOutputAttribute FindFirstChangeNotificationA GetModuleHandleA GetSystemInfo FindNextChangeNotification LockResource GetConsoleScreenBufferInfo GetPrivateProfileStringA GetLastError FillConsoleOutputCharacterA GetStdHandle SetCurrentDirectoryA lstrlenW MultiByteToWideChar SetConsoleCursorPosition HeapCreate CreateEventA SizeofResource ReadConsoleInputA WideCharToMultiByte FindResourceExA FlushConsoleInputBuffer HeapSetInformation GetCommandLineA FindCloseChangeNotification WaitForSingleObject GetCurrentProcess HeapAlloc LoadResource lstrlenA SetLastError RaiseException

user32

GetWindow MoveWindow CheckMenuItem EndPaint DestroyWindow EnumDisplayMonitors GetSystemMenu SetTimer ScreenToClient GetWindowRect RegisterClassExA PostQuitMessage SendDlgItemMessageA GetWindowDC IsIconic FillRect KillTimer GetSubMenu DrawIconEx LoadBitmapA GetParent LoadIconA wsprintfA DrawIcon FindWindowExA GetClientRect ExitWindowsEx SetFocus SendMessageA BeginPaint GetIconInfo GetDC TranslateMessage GetMenu SetRect SetWindowLongA MessageBoxA UnionRect InvalidateRect UnregisterClassA CreateWindowExA PeekMessageA ReleaseDC GetDlgItem EndDialog DefWindowProcA GetDesktopWindow GetSysColor SetWindowPos GetMenuItemInfoA CheckDlgButton ShowWindow IsDlgButtonChecked IsWindow DispatchMessageA MessageBoxW SystemParametersInfoA GetSystemMetrics SetWindowTextA LoadImageA UpdateWindow LoadCursorA SetDlgItemTextA

gdi32

BitBlt PatBlt GetTextExtentPoint32A DeleteDC CreateDIBSection CreateFontIndirectA DeleteObject SelectObject CreateCompatibleDC DPtoLP CreateCompatibleBitmap CreatePen GetObjectA GetStockObject CreateSolidBrush

advapi32

RegCreateKeyA LookupPrivilegeValueA RegQueryValueExA RegSetValueExA OpenProcessToken RegCloseKey AdjustTokenPrivileges

shell32

SHGetFolderPathW ord727 SHGetFileInfoW SHGetMalloc SHGetFolderLocation SHGetFolderPathA SHGetDesktopFolder

ole32

CoInitialize CoUninitialize CoCreateInstance

odbc32

ord41

shlwapi

StrRetToBufA PathCompactPathA

comctl32

ImageList_Create ImageList_ReplaceIcon ImageList_SetBkColor ImageList_Add

activeds

ord17

secur32

InitSecurityInterfaceA