jqqvLru0VAiH3z[.]exe

General

Target
jqqvLru0VAiH3z.exe
Size 2.2MB
Sample251012-pcxwpaaq4y
SHA256 13bf1cfedc09e959f6fe09da8c9a687de9ed0d7ba10ca5839a6f0928429a1272
MD5 a1be9ad4d50189570adf05e5ea2d8cc5
SHA1 bceab7c8796df429117014cf1671aad8c67751f3
SHA512 68982e0af6e773d637deb69f9ac87b0779b6cd630bf62de5b512ee80fb20bcefe0d14a8e294483228b6a6cd29cb5621817a231c9f2dc3045b47935b8f3dc76e0
SSDEEP 49152:p+Xi5g6N8cN/gl1XmpV+QVsYGSvME+9mz9X7B:p+SO6N8calw+QVsYGSvMv9mzF9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jqqvLru0VAiH3z.exe

File Explorer

jqqvLru0VAiH3z.exe

.exe 2.2MB

jqqvLru0VAiH3z.exe

IMPHASH a49f21f4fc4a43cedc166b0b1491ac5e
SHA256 13bf1cfedc09e959f6fe09da8c9a687de9ed0d7ba10ca5839a6f0928429a1272
MD5 a1be9ad4d50189570adf05e5ea2d8cc5
SHA1 bceab7c8796df429117014cf1671aad8c67751f3
SHA512 68982e0af6e773d637deb69f9ac87b0779b6cd630bf62de5b512ee80fb20bcefe0d14a8e294483228b6a6cd29cb5621817a231c9f2dc3045b47935b8f3dc76e0
SSDEEP 49152:p+Xi5g6N8cN/gl1XmpV+QVsYGSvME+9mz9X7B:p+SO6N8calw+QVsYGSvMv9mzF9
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5492

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CryptAcquireContextW CryptReleaseContext CryptDeriveKey CryptDestroyKey CryptSetKeyParam CryptDecrypt CryptCreateHash CryptHashData CryptDestroyHash

kernel32

WaitForSingleObject CreateThread VirtualAlloc VirtualProtect QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle

Sharing