xeFOiPg[.]exe | Triage™

General

Target
xeFOiPg.exe
Size 250KB
Sample250312-p6qpgasmx2
SHA256 c410086431e2227dafc6ab20710899af080d9fff4f2e58274709998c9af43e04
MD5 5aff11719c4c103ff52a475590df5ef8
SHA1 003dbb830763a042f35a059fbe90d9dd250760ba
SHA512 d8c5986957c2d569d95183c4690d32f983297bc08362ae851d5170eb80b58b90b9c380d4e533b2042860cbda34c4d5b1f919b360f38472ef5feec79e51155c76
SSDEEP 6144:rMgYzCTvjBrWl2c0oK/rqf5S+oDfDAOjG33:wTCTvVrWlsW4+o/wH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xeFOiPg.exe

File Explorer

xeFOiPg.exe

.exe 250KB

xeFOiPg.exe

IMPHASH 0e5ed1d33919124c62744c9b2fd099a1
SHA256 c410086431e2227dafc6ab20710899af080d9fff4f2e58274709998c9af43e04
MD5 5aff11719c4c103ff52a475590df5ef8
SHA1 003dbb830763a042f35a059fbe90d9dd250760ba
SHA512 d8c5986957c2d569d95183c4690d32f983297bc08362ae851d5170eb80b58b90b9c380d4e533b2042860cbda34c4d5b1f919b360f38472ef5feec79e51155c76
SSDEEP 6144:rMgYzCTvjBrWl2c0oK/rqf5S+oDfDAOjG33:wTCTvVrWlsW4+o/wH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

48164

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA Sleep LoadLibraryA GetProcAddress FreeLibrary GetTickCount CreateFileW HeapSize SetStdHandle QueryPerformanceCounter QueryPerformanceFrequency WideCharToMultiByte CloseHandle GetCurrentThreadId InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId InitializeSListHead GetCurrentProcess TerminateProcess RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree GetFileType LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap WriteConsoleW

Sharing