eDispenser[.]exe | Triage™

General

Target
eDispenser.exe
Size 8.6MB
Sample260627-pexcyaav7x
SHA256 0dd40df3813ce3aed5508507a93a908abf079f20cc1c9f7bb4c23387c04ec986
MD5 3c6d04dabeffaa25bb1d27a9de37f6bc
SHA1 784752649e6636474d67e383d6311956bc45e733
SHA512 0758e0c4fc289dbca357fbc5568f068d0dba7321b852db9c84e5769aa6085de3d2e82fb02c67c94e8754a35aea2199b3f9f355f0c3e2d0f54711b7ba01887404
SSDEEP 196608:sgXgesnEEBHpYkrlbJAiz7DZq+s0JraSr6QToh:sgXge3EBHdJDxiEa3Ee
TLSH
T14C963311B7F98965F6FB7F75AE782E62062BBC51AA79D11E2308004D4F73A908C65333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eDispenser.exe

File Explorer

eDispenser.exe

.exe 8.6MB

eDispenser.exe

IMPHASH 2504766638fe11b4c0e06283c1d3235c
SHA256 0dd40df3813ce3aed5508507a93a908abf079f20cc1c9f7bb4c23387c04ec986
MD5 3c6d04dabeffaa25bb1d27a9de37f6bc
SHA1 784752649e6636474d67e383d6311956bc45e733
SHA512 0758e0c4fc289dbca357fbc5568f068d0dba7321b852db9c84e5769aa6085de3d2e82fb02c67c94e8754a35aea2199b3f9f355f0c3e2d0f54711b7ba01887404
SSDEEP 196608:sgXgesnEEBHpYkrlbJAiz7DZq+s0JraSr6QToh:sgXge3EBHdJDxiEa3Ee
TLSH
T14C963311B7F98965F6FB7F75AE782E62062BBC51AA79D11E2308004D4F73A908C65333
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

75069

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

kernel32

InitializeCriticalSection DeleteCriticalSection CloseHandle CreateThread WaitForSingleObject SetEvent ResetEvent WaitForMultipleObjects CompareStringA GetLastError WideCharToMultiByte MultiByteToWideChar CompareStringW lstrlenA LoadLibraryA AreFileApisANSI GetModuleFileNameA GetModuleFileNameW FormatMessageA LocalFree FormatMessageW SetFileAttributesA RemoveDirectoryA SetCurrentDirectoryA GetWindowsDirectoryA SetFileAttributesW RemoveDirectoryW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW GetShortPathNameW GetShortPathNameA GetFullPathNameA GetFullPathNameW GetCurrentDirectoryA GetTempPathA GetTempFileNameA FindClose FindFirstFileA SetLastError FindFirstFileW FindNextFileA CreateFileA CreateFileW GetFileSize SetFilePointer ReadFile SetFileTime WriteFile SetEndOfFile CreateEventA EnterCriticalSection LeaveCriticalSection Sleep GetCommandLineW CreateProcessA GetExitCodeProcess IsBadReadPtr SetUnhandledExceptionFilter RaiseException GetSystemInfo VirtualProtect GetLocaleInfoA IsBadCodePtr GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetCPInfo GetOEMCP GetACP VirtualQuery InterlockedExchange RtlUnwind IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy TlsGetValue TlsSetValue TlsFree GetCurrentThreadId TlsAlloc GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetStdHandle HeapSize GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA HeapFree HeapAlloc HeapReAlloc ExitProcess GetProcAddress TerminateProcess GetCurrentProcess

user32

PostMessageA ShowWindow DestroyWindow KillTimer SetTimer SetDlgItemTextA EndDialog IsDlgButtonChecked GetDlgItem MessageBoxW DialogBoxParamA GetDesktopWindow SetForegroundWindow GetWindowLongA SetWindowLongA SetWindowTextW GetWindowTextA GetWindowTextLengthA SetWindowTextA SendMessageA LoadStringW LoadStringA CharPrevA

oleaut32

VariantClear SysAllocString SysFreeString

Sharing