file_c75f64504b4e352a[.]exe

General

Target
file_c75f64504b4e352a.exe
Size 9.6MB
Sample260629-pgb5saex9n
SHA256 c2aaba4e8900d360f446ec612930681117a2448cf41363ec5dd11eb8c0641502
MD5 8bc69c5a829b2720771023bd07dabcde
SHA1 544e3430c5195e68d1de93b4a317eda8ff9093dd
SHA512 a5e643d2d8bdc978951deaf82ade5588cc678038356e3a4c513dc7a2fd477ee35b2252bdb8e0fc97845f69757f679b1f2616d5c2e6026483e1a21cfae15e1dfa
SSDEEP 196608:yHid9vyObfMHl8mq7/yKm9b5G8JADSIsUzxoVU7lvIcBI:VDpU+FKn9b5/yNoqZvIa
TLSH
T133A65AD71A8A68ACC786EAFB8534703FDA03B46553AA71EF563A72EDF613D147024340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file_c75f64504b4e352a.exe

File Explorer

file_c75f64504b4e352a.exe

.exe 9.6MB

file_c75f64504b4e352a.exe

IMPHASH 511a9f08ad049024ceadb3547f453c54
SHA256 c2aaba4e8900d360f446ec612930681117a2448cf41363ec5dd11eb8c0641502
MD5 8bc69c5a829b2720771023bd07dabcde
SHA1 544e3430c5195e68d1de93b4a317eda8ff9093dd
SHA512 a5e643d2d8bdc978951deaf82ade5588cc678038356e3a4c513dc7a2fd477ee35b2252bdb8e0fc97845f69757f679b1f2616d5c2e6026483e1a21cfae15e1dfa
SSDEEP 196608:yHid9vyObfMHl8mq7/yKm9b5G8JADSIsUzxoVU7lvIcBI:VDpU+FKn9b5/yNoqZvIa
TLSH
T133A65AD71A8A68ACC786EAFB8534703FDA03B46553AA71EF563A72EDF613D147024340
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

9739044

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AcquireSRWLockShared AreFileApisANSI CloseHandle CompareStringW CreateDirectoryW CreateFileW DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesExW GetFileInformationByHandleEx GetFileSizeEx GetFileType GetLastError GetLocaleInfoEx GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GlobalFree HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LocalFree MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockShared RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetFileInformationByHandle SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WideCharToMultiByte WriteConsoleW WriteFile

gdiplus

GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipSaveImageToStream

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

Sharing