x5e4360008d4cdd40ede1d19a565cf754598425d03c56[.]exe

General

Target
x5e4360008d4cdd40ede1d19a565cf754598425d03c56.exe
Size 2.1MB
Sample260324-k5w3msgx9q
SHA256 5e4360008d4cdd40ede1d19a565cf754598425d03c56cdfdeff248736600d014
MD5 05f5addcc409e0d8bd1ef0d464a75e42
SHA1 cd01fae386600b86d751212f0fb9185618ab09de
SHA512 6e9f38fd4aee69f5f2cae1d518faa6c839ff0d0946be0dfa8396687b39e758834321cd7a78eb933445f34dc219f2c8b0addea103372c4cdb67efa6fe8fd9f25e
SSDEEP 49152:YPIaGigXBHvfD1f3Li9UVlerVWhNBGigXBHvfD1f3Li9UVlerVWhN:cIxD1jiaYQhCD1jiaYQh
TLSH
T139A59E76B6C08035D45B31B13D1AAD7B659CE031832091CB62E89B7E5EB06F12B37E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x5e4360008d4cdd40ede1d19a565cf754598425d03c56.exe

File Explorer

x5e4360008d4cdd40ede1d19a565cf754598425d03c56.exe

.exe 2.1MB

x5e4360008d4cdd40ede1d19a565cf754598425d03c56.exe

IMPHASH 30b62189dd33bea0f552414113e8b2af
SHA256 5e4360008d4cdd40ede1d19a565cf754598425d03c56cdfdeff248736600d014
MD5 05f5addcc409e0d8bd1ef0d464a75e42
SHA1 cd01fae386600b86d751212f0fb9185618ab09de
SHA512 6e9f38fd4aee69f5f2cae1d518faa6c839ff0d0946be0dfa8396687b39e758834321cd7a78eb933445f34dc219f2c8b0addea103372c4cdb67efa6fe8fd9f25e
SSDEEP 49152:YPIaGigXBHvfD1f3Li9UVlerVWhNBGigXBHvfD1f3Li9UVlerVWhN:cIxD1jiaYQhCD1jiaYQh
TLSH
T139A59E76B6C08035D45B31B13D1AAD7B659CE031832091CB62E89B7E5EB06F12B37E5E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

29435

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jena99\texenirag\40_xusu\gakuyunafup\xulebolucu-wobed.pdb

kernel32

CreateFileA FindActCtxSectionStringW WriteConsoleInputW ClearCommError WriteFile FindFirstVolumeMountPointW CreateDirectoryExW LocalSize WaitForMultipleObjects ReadConsoleInputA FindNextVolumeMountPointA OpenWaitableTimerW VerifyVersionInfoW GetVersionExA GetProcessId OpenEventA WriteConsoleOutputAttribute GetLocaleInfoW GetProcAddress LocalAlloc GetCommandLineW GetBinaryTypeA InterlockedDecrement OpenMutexA GetConsoleTitleA SearchPathA FindResourceA FreeConsole UpdateResourceA GetLastError GetProfileSectionW SetConsoleCursorInfo RequestWakeupLatency WritePrivateProfileSectionA GlobalFlags GetConsoleAliasesLengthW DeleteVolumeMountPointW FindResourceW SetVolumeMountPointW GetModuleHandleW HeapAlloc GetLocaleInfoA GetComputerNameA GetCurrentProcessId CreateNamedPipeA EnumResourceLanguagesW SetHandleInformation _hwrite CreateActCtxA DeleteVolumeMountPointA ReleaseActCtx WritePrivateProfileStringA GetUserDefaultLangID CreateMemoryResourceNotification WaitForSingleObject GetLongPathNameW VerifyVersionInfoA EnumCalendarInfoA FindNextFileA EnumTimeFormatsW SetLastError SetCriticalSectionSpinCount GetConsoleAliasW LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind HeapFree DeleteFileA GetStartupInfoW GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetComboBoxInfo

advapi32

RevertToSelf

Sharing