x0ac0507dd02e1efcf52837ae4f69cd32ea50a86421f1bc3eacee1dfee8de5c8e[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
x0ac0507dd02e1efcf52837ae4f69cd32ea50a86421f1bc3eacee1dfee8de5c8e.exe
Size 16.9MB
Sample260602-cskvvabx3s
SHA256 0ac0507dd02e1efcf52837ae4f69cd32ea50a86421f1bc3eacee1dfee8de5c8e
MD5 b808925d2763f91931f3dc619bc5bea9
SHA1 aa564c058682b6320c98e435cdb717a300937656
SHA512 6406408602cfc0af9aeff9e86ac66f802e2579b228140411d46545bc432a368fcb7d39a53b9785b6f3cbd80068bac167a96fa640ff0c62fb64bd2c4e8297c3e6
SSDEEP 393216:3uPqAZ1BbIlNyAD1+wgFrorUzu7ypw/IEbngdfiRg6NPLUTkfUrOfj6H/O18r+:eSAhIuApHgOwa+puIEDglzuLUQ762er+
TLSH
T15A073353B3A9C5B3D43B4A3839B9CB6687777C602132DD5B97D02DAE6B303049632726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x0ac0507dd02e1efcf52837ae4f69cd32ea50a86421f1bc3eacee1dfee8de5c8e.exe

File Explorer

x0ac0507dd02e1efcf52837ae4f69cd32ea50a86421f1bc3eacee1dfee8de5c8e.exe

.exe 16.9MB

x0ac0507dd02e1efcf52837ae4f69cd32ea50a86421f1bc3eacee1dfee8de5c8e.exe

IMPHASH bb3c0197a5a46048b230dc759df5b072
SHA256 0ac0507dd02e1efcf52837ae4f69cd32ea50a86421f1bc3eacee1dfee8de5c8e
MD5 b808925d2763f91931f3dc619bc5bea9
SHA1 aa564c058682b6320c98e435cdb717a300937656
SHA512 6406408602cfc0af9aeff9e86ac66f802e2579b228140411d46545bc432a368fcb7d39a53b9785b6f3cbd80068bac167a96fa640ff0c62fb64bd2c4e8297c3e6
SSDEEP 393216:3uPqAZ1BbIlNyAD1+wgFrorUzu7ypw/IEbngdfiRg6NPLUTkfUrOfj6H/O18r+:eSAhIuApHgOwa+puIEDglzuLUQ762er+
TLSH
T15A073353B3A9C5B3D43B4A3839B9CB6687777C602132DD5B97D02DAE6B303049632726
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17694720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Morpheme.pdb

oleacc

LresultFromObject

psapi

GetModuleBaseNameW EnumProcesses GetModuleFileNameExW EnumProcessModules

kernel32

QueueUserAPC SetWaitableTimer ExitThread CreateWaitableTimerW CreateThread ReadFile GetFileSize FindResourceW CreateDirectoryW WriteFile DeleteFileW GetTempFileNameW GetTempPathW OpenProcess FreeResource LockResource SizeofResource LoadResource SetFilePointer Sleep TerminateProcess GetProcAddress CreateProcessW GetSystemDirectoryW GetSystemTime FindResourceA OutputDebugStringW LoadLibraryA InterlockedIncrement InterlockedDecrement GlobalAddAtomW GetThreadLocale GetStringTypeW GetStringTypeA LCMapStringW ReleaseMutex GetLocaleInfoA HeapSize InitializeCriticalSectionAndSpinCount IsValidCodePage GetOEMCP GetACP GetCPInfo FlushFileBuffers GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleHandleA RtlUnwind GetProcessHeap SetEndOfFile GetModuleFileNameA SetStdHandle GetStdHandle SetHandleCount GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue WriteConsoleW GetConsoleOutputCP WriteConsoleA HeapReAlloc VirtualAlloc SetDllDirectoryW GetModuleHandleW GetCommandLineW CopyFileW SetFileAttributesW RemoveDirectoryW WaitForSingleObject GetExitCodeProcess SetThreadLocale GetCurrentProcess LocalAlloc LocalFree GetVersionExA MoveFileExW CreateFileW GetModuleFileNameW GetEnvironmentVariableW ExitProcess FreeLibrary LoadLibraryW CloseHandle CreateMutexW GetLastError LCMapStringA DeleteCriticalSection VirtualFree HeapCreate IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException LeaveCriticalSection HeapFree WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar HeapAlloc GetFileType CreateFileA GetCommandLineA GetStartupInfoA EnterCriticalSection

user32

SetRect SetPropW GetParent CallWindowProcW MapWindowPoints GetPropW RegisterClassExW CreateWindowExW SetForegroundWindow SetTimer GetMessageW TranslateMessage DispatchMessageW DefWindowProcW BeginPaint EndPaint ClientToScreen GetKeyState SetCursor InvalidateRect ReleaseCapture SetCapture GetClientRect GetWindowRect MoveWindow GetDC ReleaseDC PostQuitMessage PostMessageW FillRect ShowWindow SetWindowTextW DestroyWindow GetWindow GetWindowLongW SetWindowPos LoadStringW GetForegroundWindow DrawTextW SetWindowLongW LoadCursorW

gdi32

GetTextExtentExPointW SetTextColor SetBkMode CreateFontA BitBlt CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteDC CreateSolidBrush DeleteObject CreateDIBSection StretchBlt

advapi32

RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW ControlService OpenSCManagerW OpenServiceW CloseServiceHandle CryptHashData CryptGetHashParam CryptReleaseContext RegOpenKeyExW RegCloseKey AllocateAndInitializeSid CheckTokenMembership FreeSid

shell32

SHGetFolderPathW ShellExecuteExW ShellExecuteW ord680

ole32

StringFromGUID2 CoCreateGuid

oleaut32

SysAllocString