e0bd2220e7b9b49cfa461112fb65d234a8d8b50cf15d392e679de1f79e390100[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
e0bd2220e7b9b49cfa461112fb65d234a8d8b50cf15d392e679de1f79e390100.exe
Size 2.0MB
Sample251209-fp8dhstpfz
SHA256 e0bd2220e7b9b49cfa461112fb65d234a8d8b50cf15d392e679de1f79e390100
MD5 f375ed6becbcd87195cffb639f1eb11f
SHA1 1166914761817e87f2789b10d3b2937a9f57a4a1
SHA512 65d2e00c0ce629f35b721761702837daf26d3134654024880225251e8deb1f9fc1145e5b34108de28fd62399b5edfac7dceae0df6ad27bf4c7d4a4607dd0de37
SSDEEP 24576:T5puG56lBHn/Ik5rFWIwTQTOu9u0IEOluF40GlkMIINCCNLRN:Tvuc6lF/IQWpQVAlzH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0bd2220e7b9b49cfa461112fb65d234a8d8b50cf15d392e679de1f79e390100.exe

File Explorer

e0bd2220e7b9b49cfa461112fb65d234a8d8b50cf15d392e679de1f79e390100.exe

.exe 2.0MB

e0bd2220e7b9b49cfa461112fb65d234a8d8b50cf15d392e679de1f79e390100.exe

IMPHASH 0623f5db00daeb7e7d209f48f21ec2ff
SHA256 e0bd2220e7b9b49cfa461112fb65d234a8d8b50cf15d392e679de1f79e390100
MD5 f375ed6becbcd87195cffb639f1eb11f
SHA1 1166914761817e87f2789b10d3b2937a9f57a4a1
SHA512 65d2e00c0ce629f35b721761702837daf26d3134654024880225251e8deb1f9fc1145e5b34108de28fd62399b5edfac7dceae0df6ad27bf4c7d4a4607dd0de37
SSDEEP 24576:T5puG56lBHn/Ik5rFWIwTQTOu9u0IEOluF40GlkMIINCCNLRN:Tvuc6lF/IQWpQVAlzH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

74719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

kernel32

GetFileAttributesW CreateDirectoryW WriteFile GetStdHandle VirtualFree GetModuleHandleW GetProcAddress LoadLibraryA LockResource LoadResource SizeofResource FindResourceExA MulDiv GlobalFree GlobalAlloc lstrcmpiA GetSystemDefaultLCID GetSystemDefaultUILanguage GetUserDefaultUILanguage lstrlenW lstrcmpiW GetEnvironmentVariableW lstrcmpW GlobalMemoryStatusEx VirtualAlloc MultiByteToWideChar WideCharToMultiByte ExpandEnvironmentStringsW lstrlenA RemoveDirectoryW FindClose FindNextFileW DeleteFileW FindFirstFileW SetThreadLocale GetLocalTime GetSystemTimeAsFileTime GetTempPathW SetEnvironmentVariableW CloseHandle CreateFileW GetDriveTypeW SetCurrentDirectoryW GetModuleFileNameW GetCommandLineW GetVersionExW CreateEventW SetEvent ResetEvent InitializeCriticalSection TerminateThread ResumeThread SuspendThread IsBadReadPtr LocalFree lstrcpyW FormatMessageW GetSystemDirectoryW DeleteCriticalSection GetFileSize SetFilePointer ReadFile SetFileTime SetEndOfFile EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects GetModuleHandleA SystemTimeToFileTime GetLastError CreateThread WaitForSingleObject GetExitCodeThread Sleep SetLastError SetFileAttributesW GetDiskFreeSpaceExW lstrcatW ExitProcess CompareFileTime GetStartupInfoA

user32

SendMessageW CharUpperW DestroyWindow ReleaseDC KillTimer DispatchMessageW GetMessageW SetTimer CreateWindowExW wsprintfW ScreenToClient GetWindowRect GetParent GetSystemMenu EnableMenuItem EnableWindow MessageBeep LoadIconW LoadImageW wvsprintfW IsWindow DefWindowProcW CallWindowProcW DrawIconEx DialogBoxIndirectParamW GetWindow ClientToScreen GetDC DrawTextW ShowWindow SystemParametersInfoW SetFocus SetWindowLongW GetSystemMetrics GetClientRect GetDlgItem GetKeyState wsprintfA MessageBoxA SetWindowTextW GetSysColor GetWindowTextLengthW GetWindowTextW GetClassNameA GetWindowLongW CopyImage SetWindowPos GetWindowDC EndDialog GetMenu

gdi32

GetCurrentObject StretchBlt SetStretchBltMode CreateCompatibleBitmap SelectObject CreateCompatibleDC GetObjectW GetDeviceCaps DeleteObject CreateFontIndirectW DeleteDC

shell32

SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc ShellExecuteW SHGetSpecialFolderPathW ShellExecuteExW

ole32

CoInitialize CreateStreamOnHGlobal CoCreateInstance

oleaut32

VariantClear OleLoadPicture SysAllocString

msvcrt

__set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit _CxxThrowException _beginthreadex ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z memset _wcsnicmp _wtol strncmp malloc memmove wcscpy memcpy free memcmp _purecall ??2@YAPAXI@Z ??3@YAXPAX@Z _except_handler3 _controlfp