d60499b26aaa1adfb80910660d8824e3[.]exe

General

Target
d60499b26aaa1adfb80910660d8824e3.exe
Size 372KB
Sample250108-klez1svmcj
SHA256 8cc3a93a0f7df474a36abbbcce437adcfa0b2dc76de1914f1f5f7de47807546e
MD5 d60499b26aaa1adfb80910660d8824e3
SHA1 fe75a8409604359042389a383a0174bdd65198ca
SHA512 66b34c63f5499657af61dcb8738109a0c3428eefaac4b13c109faddabbb36b57dd726f1528952489b30eb99f67d492772efe720e1288bc7d7243ed9119904e18
SSDEEP 6144:KLDVBhbmXU+UEiVb1BJ49ndr7o52FlmgYpQZg2uV0flL0/reQ:KvVLNE0rJoo52FlmZENVdar
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60499b26aaa1adfb80910660d8824e3.exe

File Explorer

d60499b26aaa1adfb80910660d8824e3.exe

.exe 372KB

d60499b26aaa1adfb80910660d8824e3.exe

IMPHASH 11d173375b588fd71220163a95ab9292
SHA256 8cc3a93a0f7df474a36abbbcce437adcfa0b2dc76de1914f1f5f7de47807546e
MD5 d60499b26aaa1adfb80910660d8824e3
SHA1 fe75a8409604359042389a383a0174bdd65198ca
SHA512 66b34c63f5499657af61dcb8738109a0c3428eefaac4b13c109faddabbb36b57dd726f1528952489b30eb99f67d492772efe720e1288bc7d7243ed9119904e18
SSDEEP 6144:KLDVBhbmXU+UEiVb1BJ49ndr7o52FlmgYpQZg2uV0flL0/reQ:KvVLNE0rJoo52FlmZENVdar
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17009

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetCurrentProcess WriteConsoleInputA SetComputerNameW GetModuleHandleW EnumTimeFormatsW LoadLibraryW SetCommConfig GetVersionExW FindNextVolumeW GetAtomNameW FindNextVolumeMountPointW InterlockedExchange GetLastError SetLastError GetProcAddress VirtualAlloc LoadLibraryA FindNextFileA EnumDateFormatsA FreeEnvironmentStringsW OpenEventW GetShortPathNameW ReadConsoleInputW TerminateJobObject GetWindowsDirectoryW GetCurrentProcessId OpenFileMappingA EnumCalendarInfoExA EnumSystemLocalesW SwitchToThread CreateFileA CloseHandle GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep HeapSize ExitProcess HeapFree SetFilePointer WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RaiseException SetStdHandle FlushFileBuffers GetModuleHandleA WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW

user32

DdeQueryStringW OemToCharA GetWindowTextLengthA

shell32

DragFinish

Sharing