1dfe9be049f6bcad3caa8504dae4aad5e7e66d6e5ed8388478c7adb3de8d791a[.]exe

General

Target
1dfe9be049f6bcad3caa8504dae4aad5e7e66d6e5ed8388478c7adb3de8d791a.exe
Size 147KB
Sample260702-lf7craft5y
SHA256 1dfe9be049f6bcad3caa8504dae4aad5e7e66d6e5ed8388478c7adb3de8d791a
MD5 a7b3e94a5fcd20c960c42426b7c9a0c9
SHA1 096b1f15b8884bc396a5daaef50a90b4c5bb4fcd
SHA512 4c1c26923626259f5754b4c89f10f982c307e2ef5aa720f599bdfa53310d28f863503e8ea43ad7bc13e176f4d8ae881f2d8ecedcd8cda7505ff82df7b99143a6
SSDEEP 3072:O/v8N/AXowG3B8OXFUlOW4jN9ZsWomRaPTPjbdtGM5sNgz:av8uowGbW4hhoOCjKM5
TLSH
T1E4E301FC7AFA0DA7CB31A331E8228E07666538279787ED7F1531562603534828B3476B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dfe9be049f6bcad3caa8504dae4aad5e7e66d6e5ed8388478c7adb3de8d791a.exe

File Explorer

1dfe9be049f6bcad3caa8504dae4aad5e7e66d6e5ed8388478c7adb3de8d791a.exe

.dll 147KB

1dfe9be049f6bcad3caa8504dae4aad5e7e66d6e5ed8388478c7adb3de8d791a.exe

IMPHASH 409b96f74ac820aed0b8ab69562c2d9c
SHA256 1dfe9be049f6bcad3caa8504dae4aad5e7e66d6e5ed8388478c7adb3de8d791a
MD5 a7b3e94a5fcd20c960c42426b7c9a0c9
SHA1 096b1f15b8884bc396a5daaef50a90b4c5bb4fcd
SHA512 4c1c26923626259f5754b4c89f10f982c307e2ef5aa720f599bdfa53310d28f863503e8ea43ad7bc13e176f4d8ae881f2d8ecedcd8cda7505ff82df7b99143a6
SSDEEP 3072:O/v8N/AXowG3B8OXFUlOW4jN9ZsWomRaPTPjbdtGM5sNgz:av8uowGbW4hhoOCjKM5
TLSH
T1E4E301FC7AFA0DA7CB31A331E8228E07666538279787ED7F1531562603534828B3476B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8564

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

shell32

SHGetFolderPathW ShellExecuteExW

advapi32

RegSetValueExW RegQueryValueExW OpenProcessToken GetTokenInformation RegOpenKeyExW RegCreateKeyExW RegCloseKey

user32

wsprintfW SetProcessDPIAware

kernel32

RtlVirtualUnwind GetProcAddress RtlLookupFunctionEntry IsProcessorFeaturePresent SetUnhandledExceptionFilter GetEnvironmentVariableW SetEnvironmentVariableW CreateDirectoryW DeleteFileW GetDiskFreeSpaceExW SetFileAttributesW IsDebuggerPresent CheckRemoteDebuggerPresent CloseHandle GetLastError WaitForSingleObject CreateMutexW Sleep GetCurrentProcess ExitProcess CreateThread GetCurrentThread CreateProcessW GlobalMemoryStatusEx GetSystemInfo GetTickCount VirtualAlloc VirtualProtect VirtualFree DisableThreadLibraryCalls GetModuleFileNameW GetModuleHandleW RtlCaptureContext LoadLibraryW CopyFileW CreateToolhelp32Snapshot Process32FirstW Process32NextW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead UnhandledExceptionFilter

vcruntime140

memset __C_specific_handler __std_type_info_destroy_list memcpy

api-ms-win-crt-string-l1-1-0

_wcsicmp wcslen

api-ms-win-crt-runtime-l1-1-0

_initterm _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _initterm_e _execute_onexit_table _cexit

eglBindTexImage eglClientWaitSyncKHR eglCopyBuffers eglCopyMetalSharedEventANGLE eglCreateContext eglCreateDeviceANGLE eglCreateImage eglCreateImageKHR eglCreateNativeClientBufferANDROID eglCreatePbufferFromClientBuffer eglCreatePbufferSurface eglCreatePixmapSurface eglCreatePlatformPixmapSurface eglCreatePlatformPixmapSurfaceEXT eglCreatePlatformWindowSurface eglCreatePlatformWindowSurfaceEXT eglCreateStreamKHR eglCreateStreamProducerD3DTextureANGLE eglCreateSync eglCreateSyncKHR eglCreateWindowSurface eglDebugMessageControlKHR eglDestroyContext eglDestroyImage eglDestroyImageKHR eglDestroyStreamKHR eglDestroySurface eglDestroySync eglDestroySyncKHR eglDupNativeFenceFDANDROID eglExportVkImageANGLE eglForceGPUSwitchANGLE eglGetCompositorTimingANDROID eglGetCompositorTimingSupportedANDROID eglGetConfigAttrib eglGetConfigs eglGetCurrentContext eglGetCurrentDisplay eglGetCurrentSurface eglGetDisplay eglGetError eglGetFrameTimestampSupportedANDROID eglGetFrameTimestampsANDROID eglGetMscRateANGLE eglGetNativeClientBufferANDROID eglGetNextFrameIdANDROID eglGetPlatformDisplay eglGetPlatformDisplayEXT eglGetProcAddress eglGetSyncAttrib eglGetSyncAttribKHR eglGetSyncValuesCHROMIUM eglHandleGPUSwitchANGLE eglInitialize eglLabelObjectKHR eglLockSurfaceKHR eglLockVulkanQueueANGLE eglMakeCurrent eglPostSubBufferNV eglPrepareSwapBuffersANGLE eglPresentationTimeANDROID eglProgramCacheGetAttribANGLE eglProgramCachePopulateANGLE eglProgramCacheQueryANGLE eglProgramCacheResizeANGLE eglQueryAPI eglQueryContext eglQueryDebugKHR eglQueryDeviceAttribEXT eglQueryDeviceStringEXT eglQueryDisplayAttribANGLE eglQueryDisplayAttribEXT eglQueryDmaBufFormatsEXT eglQueryDmaBufModifiersEXT eglQueryStreamKHR eglQueryStreamu64KHR eglQueryString eglQueryStringiANGLE eglQuerySupportedCompressionRatesEXT eglQuerySurface eglQuerySurface64KHR eglQuerySurfacePointerANGLE eglReacquireHighPowerGPUANGLE eglReleaseDeviceANGLE eglReleaseExternalContextANGLE eglReleaseHighPowerGPUANGLE eglReleaseTexImage eglReleaseThread eglSetBlobCacheFuncsANDROID eglSetDamageRegionKHR eglSetValidationEnabledANGLE eglSignalSyncKHR eglStreamAttribKHR eglStreamConsumerAcquireKHR eglStreamConsumerGLTextureExternalAttribsNV eglStreamConsumerGLTextureExternalKHR eglStreamConsumerReleaseKHR eglStreamPostD3DTextureANGLE eglSurfaceAttrib eglSwapBuffers eglSwapBuffersWithDamageKHR eglSwapInterval eglTerminate eglUnlockSurfaceKHR eglUnlockVulkanQueueANGLE eglWaitClient eglWaitGL eglWaitNative eglWaitSync eglWaitSyncKHR eglWaitUntilWorkScheduledANGLE injection_initialize injection_terminate

Sharing