x231b60c4988bfa362b58249ebbc13d2c0d424e2d4b1436ddc373473de70674a6[.]exe

Target
x231b60c4988bfa362b58249ebbc13d2c0d424e2d4b1436ddc373473de70674a6.exe
Size 33.0MB
Sample260304-e4z51scy4k
SHA256 231b60c4988bfa362b58249ebbc13d2c0d424e2d4b1436ddc373473de70674a6
MD5 1bd5bad356b2c6c80d5dabd3e3d605ae
SHA1 6f2f5b011682c71114afd1c79325bd7735d07043
SHA512 3255d144ddb42af3f34e3370cd4d4227a74d43b14a2b7e6015e2b5b2aa34e18c5387ba77cbdfb8b6bb50e45fd15143965c93be0d7d571006f1c125d2239a08a2
SSDEEP 786432:sAmMkIneVeqo6ZSCxyPhT8NZne7Ff9v3pngzCwrIljXhqqsGD/:jmMFQeYZSCYPpUst3WzC5z2G
TLSH
T107773344A28548BED09AC4724786C476FD32744E4B27FCEB56F0F3703A86ED59BAC660
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x231b60c4988bfa362b58249ebbc13d2c0d424e2d4b1436ddc373473de70674a6.exe

File Explorer

x231b60c4988bfa362b58249ebbc13d2c0d424e2d4b1436ddc373473de70674a6.exe

.exe 33.0MB

x231b60c4988bfa362b58249ebbc13d2c0d424e2d4b1436ddc373473de70674a6.exe

IMPHASH 8cd00df0f1348d40fa28a10588b134e9
SHA256 231b60c4988bfa362b58249ebbc13d2c0d424e2d4b1436ddc373473de70674a6
MD5 1bd5bad356b2c6c80d5dabd3e3d605ae
SHA1 6f2f5b011682c71114afd1c79325bd7735d07043
SHA512 3255d144ddb42af3f34e3370cd4d4227a74d43b14a2b7e6015e2b5b2aa34e18c5387ba77cbdfb8b6bb50e45fd15143965c93be0d7d571006f1c125d2239a08a2
SSDEEP 786432:sAmMkIneVeqo6ZSCxyPhT8NZne7Ff9v3pngzCwrIljXhqqsGD/:jmMFQeYZSCYPpUst3WzC5z2G
TLSH
T107773344A28548BED09AC4724786C476FD32744E4B27FCEB56F0F3703A86ED59BAC660
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

256244

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dscrd.pdb

kernel32

GetLastError GetExitCodeProcess SetLastError GetCurrentProcessId CloseHandle WaitForSingleObjectEx GetCurrentProcess ReleaseMutex DuplicateHandle SleepEx GetCurrentThread GetCurrentThreadId IsProcessorFeaturePresent GetProcAddress GetProcessHeap DeleteFileW GetFileAttributesW FindClose FindFirstFileExW GetFileInformationByHandle SwitchToThread GetFullPathNameW SetFileInformationByHandle GetFileInformationByHandleEx GetTempFileNameW GetTempPathW WaitForSingleObject SetThreadStackGuarantee FormatMessageW HeapAlloc HeapFree CreateThread FreeEnvironmentStringsW GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetModuleFileNameW CompareStringOrdinal CreateDirectoryW CreateFileW GetModuleHandleA GetEnvironmentVariableW RtlVirtualUnwind WideCharToMultiByte lstrlenW WriteFileEx CreateMutexA RtlLookupFunctionEntry RtlCaptureContext SetUnhandledExceptionFilter WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetConsoleMode GetStdHandle HeapReAlloc AddVectoredExceptionHandler GetModuleHandleW LoadLibraryW ActivateActCtx CreateActCtxW ReadFileEx GetSystemTimeAsFileTime QueryPerformanceCounter InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter LoadLibraryA GetCurrentDirectoryW

user32

ShowWindow DispatchMessageW PostMessageW GetClassNameW GetMenuItemID GetSubMenu SendMessageW DefWindowProcW TranslateMessage DestroyMenu DestroyWindow GetMenuItemCount DeleteMenu GetParent SetParent IsDialogMessageW AdjustWindowRectEx GetForegroundWindow GetAncestor GetMessageW EnumChildWindows CreateWindowExW LoadCursorW RegisterClassExW

ntdll

NtOpenFile RtlNtStatusToDosError NtWriteFile NtCreateNamedPipeFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

bcryptprimitives

ProcessPrng

shell32

DragFinish

comctl32

InitCommonControlsEx ord411 ord412 ord413 ord410

gdi32

CreateFontW

ole32

CoInitialize

vcruntime140

memmove __CxxFrameHandler3 memcmp memcpy memset __current_exception_context __current_exception __C_specific_handler

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment __p___argv _get_initial_narrow_environment _c_exit _initterm __p___argc _set_app_type _register_thread_local_exe_atexit_callback _cexit _seh_filter_exe _initterm_e exit terminate _crt_atexit _exit _register_onexit_function _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Resubmissions

Sharing

General