68a2463b6158df3417d67dd62a36c2f24a6222f5470c4eed599eb88f6fc0c69f[.]exe

General

Target
68a2463b6158df3417d67dd62a36c2f24a6222f5470c4eed599eb88f6fc0c69f.exe
Size 732KB
Sample260719-srgd2af12x
SHA256 68a2463b6158df3417d67dd62a36c2f24a6222f5470c4eed599eb88f6fc0c69f
MD5 f791a17b78583d50f576792919ab8ccf
SHA1 0d6238abadf6c8cb010f3ef7aa6401d620d9c6c7
SHA512 0c31d906def9c52882581abf04fe8d9412222994c251bad4fd4ed2c18fb93c725514a0723b0c3e2c62584806631069d3beda38e8c1e99ceb11597ac714b0a12a
SSDEEP 12288:XJrnw2bC6nrJJBDVHLtkiS0PwoTYtCTTIMQgKJhdiP230Ok5JRzLIVH8XHzi/YB+:ZrLXzdVHLtZquIRgKJaP230OIRfIhkHW
TLSH
T171F4121076C9D436E6A345700E20D7B15637BCB2DEA2DACB379356BA5F7A291CE0C312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68a2463b6158df3417d67dd62a36c2f24a6222f5470c4eed599eb88f6fc0c69f.exe

File Explorer

68a2463b6158df3417d67dd62a36c2f24a6222f5470c4eed599eb88f6fc0c69f.exe

.exe 732KB

68a2463b6158df3417d67dd62a36c2f24a6222f5470c4eed599eb88f6fc0c69f.exe

IMPHASH 694d640a38a305673498b98114ebcdcd
SHA256 68a2463b6158df3417d67dd62a36c2f24a6222f5470c4eed599eb88f6fc0c69f
MD5 f791a17b78583d50f576792919ab8ccf
SHA1 0d6238abadf6c8cb010f3ef7aa6401d620d9c6c7
SHA512 0c31d906def9c52882581abf04fe8d9412222994c251bad4fd4ed2c18fb93c725514a0723b0c3e2c62584806631069d3beda38e8c1e99ceb11597ac714b0a12a
SSDEEP 12288:XJrnw2bC6nrJJBDVHLtkiS0PwoTYtCTTIMQgKJhdiP230Ok5JRzLIVH8XHzi/YB+:ZrLXzdVHLtZquIRgKJaP230OIRfIhkHW
TLSH
T171F4121076C9D436E6A345700E20D7B15637BCB2DEA2DACB379356BA5F7A291CE0C312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW SetEndOfFile LocalCompact CreateHardLinkA GetProcessHeap EnumResourceTypesA GlobalAlloc LoadLibraryW IsProcessInJob AssignProcessToJobObject CreateEventA IsBadWritePtr GetLastError GetCurrentDirectoryW SetLastError GetProcAddress IsBadHugeWritePtr VerLanguageNameA LoadLibraryA SetConsoleCtrlHandler AddAtomW GlobalHandle GetModuleFileNameA GetOEMCP GlobalUnWire HeapSetInformation GetFileTime GetCurrentThreadId Module32NextW GetDiskFreeSpaceExA ReadConsoleInputW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer HeapReAlloc WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate ReadFile WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CreateFileW

user32

ChangeMenuW GetMessageExtraInfo CharUpperBuffA SetCursorPos SetUserObjectSecurity SetCaretPos GetCaretBlinkTime SetClipboardViewer

Sharing