13FD1F0BF69EA3088148B347A8177971[.]exe

General

Target
13FD1F0BF69EA3088148B347A8177971.exe
Size 77KB
Sample250519-lrbefsdr2z
SHA256 fa6f2143d9e40d6ba356e3a74a56a1b80b3ff3e962e17afe6a2ca90aca3829b7
MD5 13fd1f0bf69ea3088148b347a8177971
SHA1 1ab36804ba6e6b3075b6aa4fd1d095d6011ed8d7
SHA512 31edc49a94c76659423f1ef319ed1abef75b0c86d572a1b6ef45de9157f40365afdfffc311223ca9ef5d9fc2ab7a3cb5d9997b1baf8e57636c140ff2093ce693
SSDEEP 1536:rl3hXkCPE0M4vjns87y4eWCE4iWpsPzeQw8sW7cdQCwjjWej/1NtSk:nM4vBm3jEWpsaNbQLjjW4Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13FD1F0BF69EA3088148B347A8177971.exe

File Explorer

13FD1F0BF69EA3088148B347A8177971.exe

.exe 77KB

13FD1F0BF69EA3088148B347A8177971.exe

IMPHASH 710056dc2d8fbf2ef9576920751f21e3
SHA256 fa6f2143d9e40d6ba356e3a74a56a1b80b3ff3e962e17afe6a2ca90aca3829b7
MD5 13fd1f0bf69ea3088148b347a8177971
SHA1 1ab36804ba6e6b3075b6aa4fd1d095d6011ed8d7
SHA512 31edc49a94c76659423f1ef319ed1abef75b0c86d572a1b6ef45de9157f40365afdfffc311223ca9ef5d9fc2ab7a3cb5d9997b1baf8e57636c140ff2093ce693
SSDEEP 1536:rl3hXkCPE0M4vjns87y4eWCE4iWpsPzeQw8sW7cdQCwjjWej/1NtSk:nM4vBm3jEWpsaNbQLjjW4Q
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateToolhelp32Snapshot Process32NextW LockResource Process32FirstW ResumeThread FindResourceW QueueUserAPC VirtualAllocEx CreateProcessA WriteProcessMemory SizeofResource LoadResource GetModuleFileNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetACP HeapFree HeapAlloc LCMapStringW CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW DecodePointer CreateFileW

advapi32

RegCloseKey RegSetValueExA RegCreateKeyA

Sharing