beb1e69343d025a5835b1294ca7b22180e6d726259e013f8ab1ede702f15a12c[.]exe

General

Target
beb1e69343d025a5835b1294ca7b22180e6d726259e013f8ab1ede702f15a12c.exe
Size 665KB
Sample260528-a2fldaes6x
SHA256 beb1e69343d025a5835b1294ca7b22180e6d726259e013f8ab1ede702f15a12c
MD5 1a1ae30f5cbb67ebef1181ffff04e79d
SHA1 0f84ea72c79527c6ec29aa8e5c54612a65ff4bd5
SHA512 729704a486349c1aa5c614b82ba794316046aeec15e158312b7c23a34ff18e0dbb534a50f80a78b4b36cd822e42cc545c2b10a583cd436e2f7a4e0c416c7e6ab
SSDEEP 12288:XubXcB3afJcLln5QwnVWqqPIBONhxsU/EbBjvrEH7YE:Xurq90r/xsU/EhrEH7D
TLSH
T185E408E16240F65FF2C099336FDC8A720979F92DC9CA905767802FAA59350F26736633
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beb1e69343d025a5835b1294ca7b22180e6d726259e013f8ab1ede702f15a12c.exe

File Explorer

beb1e69343d025a5835b1294ca7b22180e6d726259e013f8ab1ede702f15a12c.exe

.exe 665KB

beb1e69343d025a5835b1294ca7b22180e6d726259e013f8ab1ede702f15a12c.exe

IMPHASH afa785ab09891f33af84b69a4267bd2d
SHA256 beb1e69343d025a5835b1294ca7b22180e6d726259e013f8ab1ede702f15a12c
MD5 1a1ae30f5cbb67ebef1181ffff04e79d
SHA1 0f84ea72c79527c6ec29aa8e5c54612a65ff4bd5
SHA512 729704a486349c1aa5c614b82ba794316046aeec15e158312b7c23a34ff18e0dbb534a50f80a78b4b36cd822e42cc545c2b10a583cd436e2f7a4e0c416c7e6ab
SSDEEP 12288:XubXcB3afJcLln5QwnVWqqPIBONhxsU/EbBjvrEH7YE:Xurq90r/xsU/EhrEH7D
TLSH
T185E408E16240F65FF2C099336FDC8A720979F92DC9CA905767802FAA59350F26736633
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

130730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Ventoy\Ventoy2Disk\Release\Ventoy2Disk.pdb

kernel32

SetLastError GetCurrentProcess GetUserDefaultUILanguage GetSystemDirectoryW LCIDToLocaleName MultiByteToWideChar GetLastError LockResource LoadLibraryW LoadResource FindResourceW GetProcAddress GetModuleHandleW FreeLibrary WideCharToMultiByte GetSystemWindowsDirectoryW LoadLibraryExW GetEnvironmentVariableA LoadLibraryA GetDriveTypeW GetVolumeInformationA WaitForSingleObject GetCurrentDirectoryA DeleteFileA CloseHandle GetStartupInfoA GetCurrentProcessId CreateProcessA GetVolumeNameForVolumeMountPointA Sleep FormatMessageW DeviceIoControl ReadFile WriteFile SetFilePointerEx GetLogicalDrives DeleteVolumeMountPointA SetFilePointer QueryDosDeviceA FindFirstVolumeA GetTickCount64 SetVolumeMountPointA CreateFileA GetLogicalDriveStringsA FindNextVolumeA FindVolumeClose K32GetModuleFileNameExW K32GetProcessImageFileNameW GetModuleHandleA GetNativeSystemInfo ReadProcessMemory QueryFullProcessImageNameW GetFileType IsWow64Process VerifyVersionInfoA GetProductInfo GetFileAttributesA GetVersionExA GetLocalTime GetSystemWow64DirectoryA VerSetConditionMask GetDiskFreeSpaceA GetPrivateProfileIntA lstrlenW GetSystemDefaultUILanguage GetPrivateProfileIntW LoadLibraryExA GetModuleFileNameW CreateFileW GetPrivateProfileSectionNamesW OpenProcess CreateToolhelp32Snapshot GetPrivateProfileStringW Process32NextW SetDllDirectoryA Process32FirstW CreateThread GetWindowsDirectoryA GetCurrentDirectoryW SetCurrentDirectoryW GetFileSize lstrcpyW lstrcmpW SetEndOfFile WriteConsoleW HeapReAlloc HeapSize FlushFileBuffers GetProcessHeap GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW DecodePointer GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose ReadConsoleW LCMapStringW GetFileSizeEx GetConsoleMode GetConsoleOutputCP HeapFree HeapAlloc GetModuleHandleExW ExitProcess GetStdHandle GetCommandLineW GetCommandLineA RaiseException GetSystemInfo VirtualProtect VirtualQuery UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree

user32

GetMenuState ModifyMenuW LoadMenuW GetMenu CreateWindowExW DeleteMenu ScreenToClient GetSubMenu ShowWindow SetWindowTextA SendDlgItemMessageW IsWindowEnabled MoveWindow SetMenu SetFocus LoadIconW wsprintfW CheckMenuItem AppendMenuW SetWindowTextW UpdateWindow LoadImageW GetSystemMetrics GetWindowRect MessageBoxW CheckRadioButton EndDialog GetWindowTextA SendMessageA GetDlgItem InvalidateRect EnableWindow GetWindowLongW EnumChildWindows SendMessageW LoadStringW SetWinEventHook GetWindowTextW DialogBoxParamW

Sharing