b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe
Size 7.6MB
Sample260702-e2kybabx5y
SHA256 b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19
MD5 7a596f6c146b700e1718433e143f915d
SHA1 62063c13c00ae0061dedf8e106634bf16a2821c3
SHA512 1e13c909c253dc81afb7e6d8158e1ca4f20655b37bf4e9fcd3281a4aad78d44693d3c760b731a2e818fb9834e645340625a929ae86c628e4e513e36abb22e540
SSDEEP 98304:r4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA4Bw1+n+:EE8/5PCYkzq73AcGk
TLSH
T130866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

File Explorer

b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

.exe 7.6MB

b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19.exe

IMPHASH 5da8941fcd5ef825ee28aaed8905c00d
SHA256 b3b36aaea2fd22ae507e089c8fcd1e60be502e9fb9aacefc4c017cee8b1e7f19
MD5 7a596f6c146b700e1718433e143f915d
SHA1 62063c13c00ae0061dedf8e106634bf16a2821c3
SHA512 1e13c909c253dc81afb7e6d8158e1ca4f20655b37bf4e9fcd3281a4aad78d44693d3c760b731a2e818fb9834e645340625a929ae86c628e4e513e36abb22e540
SSDEEP 98304:r4I+irn0njwaxr6LZ8V1DUFk1tQlusoA8PC6t+DZf1q7cIA4Bw1+n+:EE8/5PCYkzq73AcGk
TLSH
T130866C07E29480E9C0AEC0B8C31B9A37EB72B8895535F29F5BE44B512F26F506F1D719
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5805936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

daily_huddle.pdb

ntdll

NtCancelIoFileEx NtCreateNamedPipeFile RtlNtStatusToDosError NtCreateFile NtWriteFile NtDeviceIoControlFile NtReadFile NtOpenFile RtlGetVersion

kernel32

IsProcessorFeaturePresent OpenProcess WakeAllConditionVariable GetCurrentThreadId LoadLibraryW SleepConditionVariableSRW GetModuleHandleA IsDebuggerPresent RtlLookupFunctionEntry SetLastError WaitForSingleObjectEx WideCharToMultiByte ReleaseMutex MultiByteToWideChar SetWaitableTimer FormatMessageW AcquireSRWLockExclusive GetModuleFileNameW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW DuplicateHandle SleepEx ExitProcess GetSystemTimePreciseAsFileTime HeapAlloc SetHandleInformation LCIDToLocaleName GetUserDefaultUILanguage RtlPcToFileHeader EncodePointer TlsAlloc TlsGetValue TlsSetValue GetSystemInfo GetCurrentProcess LocalFree GetCurrentProcessId CloseHandle RtlUnwindEx DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SystemTimeToFileTime ReleaseSRWLockExclusive QueryPerformanceCounter FreeEnvironmentStringsW GetEnvironmentStringsW TerminateProcess QueryPerformanceFrequency GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext WaitForSingleObject SetEnvironmentVariableW AddVectoredExceptionHandler TlsFree GetModuleHandleW GlobalSize GlobalLock CreateFileMappingW GlobalAlloc LoadLibraryA GetProcAddress Process32NextW Process32FirstW CreateToolhelp32Snapshot GlobalUnlock OpenMutexW CreateEventA AreFileApisANSI ReadFile WriteFile GetDiskFreeSpaceW LockFile SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathA GetDiskFreeSpaceA GetExitCodeProcess GetFileAttributesA GetFileAttributesExW OpenEventW CreateFileA DeleteFileA UnlockFile LockFileEx GetFileSize FlushFileBuffers LoadLibraryExA PostQueuedCompletionStatus CopyFileExW DeleteFileW WriteFileEx GetTickCount MapViewOfFile FormatMessageA GetSystemTime GetSystemTimeAsFileTime FreeLibrary HeapDestroy HeapCompact FlushViewOfFile OutputDebugStringW HeapSize HeapValidate InitializeCriticalSectionAndSpinCount OutputDebugStringA HeapCreate RaiseException LoadLibraryExW GetLastError HeapReAlloc ReadFileEx CreateThread UnhandledExceptionFilter SetEvent GetFileAttributesW CreateProcessW lstrlenW FindFirstFileExW CreateDirectoryW GetCommandLineW SetUnhandledExceptionFilter SwitchToThread Sleep SetFilePointerEx FindNextFileW FindClose HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee InitializeSListHead GetFinalPathNameByHandleW CreateEventW SetFileInformationByHandle CreateFileW GetFullPathNameW GetFileInformationByHandleEx GetFileInformationByHandle GetTempPathW CreateWaitableTimerExW UnmapViewOfFile CreateMutexW WriteConsoleW GetQueuedCompletionStatusEx GetConsoleOutputCP GetConsoleMode CreateIoCompletionPort SetFileCompletionNotificationModes GetStdHandle CreateMutexA

user32

GetTouchInputInfo ScreenToClient TrackMouseEvent SystemParametersInfoW FlashWindowEx LoadCursorW SetCursor IsIconic GetParent RegisterTouchWindow SetWindowLongPtrW IsWindow KillTimer SetTimer CloseTouchInputHandle GetWindow SetCursorPos UpdateWindow SetWindowRgn GetForegroundWindow IsWindowEnabled SetWindowTextW IsWindowVisible GetWindowTextW SetFocus GetWindowTextLengthW EnableWindow SetParent ShowCursor ClipCursor GetClipCursor MonitorFromRect EnumChildWindows EnumDisplayMonitors GetKeyState ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyboardState InvalidateRect ReleaseCapture SetCapture SetWindowLongW GetSystemMenu GetMonitorInfoW SetWindowPlacement ChangeDisplaySettingsExW SetPropW GetSystemMetrics GetWindowPlacement RegisterRawInputDevices DispatchMessageA TranslateMessage GetMessageA AdjustWindowRectEx GetMenu GetWindowLongW InvalidateRgn RegisterWindowMessageA IsProcessDPIAware MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos EnableMenuItem CreateIcon CreatePopupMenu CreateMenu AppendMenuW InsertMenuW DrawIconEx GetDC VkKeyScanW SetMenuItemInfoW SendInput CheckMenuItem DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo ShowWindow SystemParametersInfoA GetActiveWindow DrawMenuBar CreateAcceleratorTableW DestroyAcceleratorTable DestroyIcon DestroyMenu SetMenu RemoveMenu SetWindowPos FindWindowExW MessageBoxW CreateWindowExW RegisterClassExW PostMessageW GetWindowLongPtrW RedrawWindow AdjustWindowRect SetProcessDpiAwarenessContext DestroyWindow TranslateAcceleratorW GetMenuItemInfoW ChangeWindowMessageFilterEx SetWindowDisplayAffinity SendMessageW MonitorFromPoint CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard SetClipboardData EmptyClipboard DefWindowProcW PostQuitMessage RemoveClipboardFormatListener CallNextHookEx GetAsyncKeyState UnhookWindowsHookEx AddClipboardFormatListener RegisterClassW SetWindowsHookExW RegisterClipboardFormatW MsgWaitForMultipleObjectsEx DispatchMessageW MapVirtualKeyW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetRawInputData GetMessageW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

comctl32

SetWindowSubclass TaskDialogIndirect DefSubclassProc RemoveWindowSubclass

ole32

CoCreateFreeThreadedMarshaler RegisterDragDrop RevokeDragDrop CoTaskMemFree CoTaskMemAlloc OleInitialize CoSetProxyBlanket CoCreateInstance CoUninitialize CoInitializeEx

shlwapi

SHCreateMemStream

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

shell32

SHGetKnownFolderPath DragFinish Shell_NotifyIconGetRect SHAppBarMessage Shell_NotifyIconW ShellExecuteExW DragQueryFileW ShellExecuteW

oleaut32

SysAllocStringByteLen SysAllocStringLen SetErrorInfo SysStringLen GetErrorInfo SysFreeString SysStringByteLen

gdi32

CreateCompatibleDC CombineRgn CreateDIBSection SelectObject SetTextColor DeleteDC SetBkMode BitBlt DeleteObject GetDeviceCaps CreateRectRgn CreateSolidBrush

advapi32

GetTokenInformation ImpersonateLoggedOnUser DuplicateTokenEx AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegQueryValueExW RegOpenKeyExW SystemFunction036 EventRegister EventSetInformation RegGetValueW EventWriteTransfer EventUnregister RevertToSelf

bcryptprimitives

ProcessPrng

ws2_32

send recv getsockname connect freeaddrinfo WSACleanup WSAStartup getaddrinfo closesocket recvfrom getsockopt WSAGetLastError setsockopt WSASocketW ioctlsocket bind WSAIoctl sendto WSASend

crypt32

CryptUnprotectData CryptProtectData

ncrypt

NCryptFreeObject NCryptOpenKey NCryptOpenStorageProvider NCryptDecrypt

d3d11

D3D11CreateDevice

bcrypt

BCryptGenRandom

iphlpapi

GetAdaptersAddresses

api-ms-win-crt-string-l1-1-0

strncmp strcspn strcmp wcscmp strspn strncpy_s wcslen strlen strcpy_s wcsncmp _wcsicmp

api-ms-win-crt-math-l1-1-0

floorf floor ceil log round __setusermatherr roundf fabs sqrtf log10 _dclass trunc pow

api-ms-win-crt-heap-l1-1-0

realloc _msize malloc _callnewh calloc _set_new_mode free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_exit _initterm_e __p___argc __p___argv _initterm _seh_filter_exe _cexit _c_exit _get_initial_narrow_environment _register_thread_local_exe_atexit_callback abort terminate _crt_atexit _initialize_narrow_environment _configure_narrow_argv _beginthreadex _register_onexit_function _initialize_onexit_table _wassert _set_app_type _endthreadex exit

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s _wtoi

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vsnprintf_s __acrt_iob_func __p__commode __stdio_common_vfprintf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale