26422000001257905011_pdf[.]exe

General

Target
26422000001257905011_pdf.exe
Size 27.3MB
Sample260703-mmcmdsfv4x
SHA256 7bb8ff1a5d1262d63167c0db64c00ae1965671c5168720fda081ca62d41d57d3
MD5 608646f448c0a5c26a34c79fcec2257a
SHA1 3f033e89ee8e868c4ca228c45225428c9a89b6b6
SHA512 17274c72d46b74d5cfd347bf12f01aca92d35df546db52986cd47239ab0a457f69af645c77038bbe626ef41d5ca096649c307f026832063b3e82bd5c443d5e79
SSDEEP 393216:widnRPx6mz6JixSJ4wqUsXp95IA2KzyHwKawW11JOR24LaI74H/KxpY9ZN+:wi6ivwqU88QKTag2iaIhwN+
TLSH
T10B5733B86FED12E9D03B66BEBD44F6031796A4ECBEC5C84833C0684689D6E87CC465C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26422000001257905011_pdf.exe

File Explorer

26422000001257905011_pdf.exe

.exe 27.3MB

26422000001257905011_pdf.exe

IMPHASH a24e57cfb1e35030a9b4252bf1fa8b4b
SHA256 7bb8ff1a5d1262d63167c0db64c00ae1965671c5168720fda081ca62d41d57d3
MD5 608646f448c0a5c26a34c79fcec2257a
SHA1 3f033e89ee8e868c4ca228c45225428c9a89b6b6
SHA512 17274c72d46b74d5cfd347bf12f01aca92d35df546db52986cd47239ab0a457f69af645c77038bbe626ef41d5ca096649c307f026832063b3e82bd5c443d5e79
SSDEEP 393216:widnRPx6mz6JixSJ4wqUsXp95IA2KzyHwKawW11JOR24LaI74H/KxpY9ZN+:wi6ivwqU88QKTag2iaIhwN+
TLSH
T10B5733B86FED12E9D03B66BEBD44F6031796A4ECBEC5C84833C0684689D6E87CC465C5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7581

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpiA lstrcpyA lstrlenA _lclose RemoveDirectoryA DeleteFileA GetModuleFileNameA _lread _llseek _lopen GetDiskFreeSpaceA SetCurrentDirectoryA CreateDirectoryA GetFileAttributesA lstrcatA GetTempPathA GetCurrentDirectoryA _lwrite _lcreat CloseHandle GetExitCodeProcess CreateProcessA ExitProcess TerminateProcess GetCurrentProcess HeapFree HeapAlloc GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc RtlUnwind UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue GetLastError WriteFile GetCPInfo GetACP GetOEMCP GetProcAddress LoadLibraryA InterlockedDecrement InterlockedIncrement MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

TranslateMessage DispatchMessageA PeekMessageA MsgWaitForMultipleObjects wsprintfA LoadCursorA SetCursor MessageBoxA

Sharing