f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c.exe
Size 374KB
Sample260712-wk2ceagy5z
SHA256 f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c
MD5 42d4d03e34133e506fc34374b5dd17b7
SHA1 5d882fd51438b55ad7623d2725d6b275af2c0a93
SHA512 94230d87d6ae8b3248894571c08c2eed75a4fd989e8b70cd4a51068c055617521a72298175fb45dc48c513f99dddaf85cec4161fe930e4ccfca38a9d5c5f2a9b
SSDEEP 3072:KXiZYkCItXCGpSFRSJyE18jSaCTBIJCfCr8OIRachyk2Wh/RgaaJzUxtVmj3qh8l:KHkCItizSJJwYmUU3yacEkMzUD0Fl
TLSH
T1B2843910A6C18BE1C456F6B84EE4D630C7296CC81BA096FE9E7CFF558630DA0DE3059E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c.exe

File Explorer

f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c.exe

.exe 374KB

f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c.exe

IMPHASH 59f37c13d2cae7cc547b602d07aa7033
SHA256 f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c
MD5 42d4d03e34133e506fc34374b5dd17b7
SHA1 5d882fd51438b55ad7623d2725d6b275af2c0a93
SHA512 94230d87d6ae8b3248894571c08c2eed75a4fd989e8b70cd4a51068c055617521a72298175fb45dc48c513f99dddaf85cec4161fe930e4ccfca38a9d5c5f2a9b
SSDEEP 3072:KXiZYkCItXCGpSFRSJyE18jSaCTBIJCfCr8OIRachyk2Wh/RgaaJzUxtVmj3qh8l:KHkCItizSJJwYmUU3yacEkMzUD0Fl
TLSH
T1B2843910A6C18BE1C456F6B84EE4D630C7296CC81BA096FE9E7CFF558630DA0DE3059E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

63253

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathCombineW PathFindFileNameW

wininet

InternetReadFile InternetCloseHandle HttpQueryInfoW InternetOpenW InternetOpenUrlW

netapi32

NetApiBufferFree NetShareEnum

shell32

SHChangeNotify SHGetFolderPathW SHGetSpecialFolderPathW ShellExecuteExW

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW

ole32

CoInitialize CoUninitialize CoCreateInstance

user32

wsprintfW

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetCommandLineA LeaveCriticalSection GetFileType EnumSystemLocalesW GetUserDefaultLCID Sleep LoadLibraryA GlobalAlloc GetProcAddress GlobalLock GlobalUnlock ReadFile FindFirstFileW HeapFree FindNextFileW lstrlenW WriteFile lstrcpynW GetModuleFileNameW GetTempPathW CreateMutexW FindClose GetVolumePathNameW WaitForSingleObject CreateFileW GetFileAttributesW SetFileAttributesW GetLogicalDriveStringsW GetLastError DeleteFileW CloseHandle CreateThread HeapAlloc GetFileSize GetProcessHeap CopyFileW lstrcmpiW GetTickCount GetDriveTypeW MultiByteToWideChar WideCharToMultiByte LCMapStringEx EnterCriticalSection WriteConsoleW InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW IsValidLocale RtlUnwind RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree GetStdHandle GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW HeapReAlloc IsDebuggerPresent UnhandledExceptionFilter VirtualProtect LoadLibraryExW LCMapStringW GetLocaleInfoW

Name

.text

Size

139KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

170KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c.exe

shlwapi

wininet

netapi32

shell32

advapi32

ole32

user32

kernel32

generic