55d5702e6d30bfef8c4c036744bfe2330137d52dc32ee3399b1375614f815a9b[.]exe

General

Target
55d5702e6d30bfef8c4c036744bfe2330137d52dc32ee3399b1375614f815a9b.exe
Size 772KB
Sample260726-ejj83ayvcv
SHA256 55d5702e6d30bfef8c4c036744bfe2330137d52dc32ee3399b1375614f815a9b
MD5 2628b429dd3d85a99e7ad9f0a7fd50dd
SHA1 9df0de00ad72ea68c392eb883dbbffe09d8c22ee
SHA512 cb78d1916047cb3e7e3329cadaadf675c480581593f0a8e00d378d17b35752ddd6e0bafa5b96432fac3c3c9d5b01245417f843e94fe0c27e0e38d12406abf8e6
SSDEEP 12288:X/wtKwr8UC21CZYSzI0ojZ18P+jB+g7CIrrE0L/h0wFXO4uTApb:X/7FR21CjajMPYBh7C43Lh0MXObT8
TLSH
T1A6F4E11263E33C64E5165AB29E29C2E87A1EFB618F4B77DF12146E2F08710F2D172B51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55d5702e6d30bfef8c4c036744bfe2330137d52dc32ee3399b1375614f815a9b.exe

File Explorer

55d5702e6d30bfef8c4c036744bfe2330137d52dc32ee3399b1375614f815a9b.exe

.exe 772KB

55d5702e6d30bfef8c4c036744bfe2330137d52dc32ee3399b1375614f815a9b.exe

IMPHASH 382962f043b5a0413c587a899bceffb1
SHA256 55d5702e6d30bfef8c4c036744bfe2330137d52dc32ee3399b1375614f815a9b
MD5 2628b429dd3d85a99e7ad9f0a7fd50dd
SHA1 9df0de00ad72ea68c392eb883dbbffe09d8c22ee
SHA512 cb78d1916047cb3e7e3329cadaadf675c480581593f0a8e00d378d17b35752ddd6e0bafa5b96432fac3c3c9d5b01245417f843e94fe0c27e0e38d12406abf8e6
SSDEEP 12288:X/wtKwr8UC21CZYSzI0ojZ18P+jB+g7CIrrE0L/h0wFXO4uTApb:X/7FR21CjajMPYBh7C43Lh0MXObT8
TLSH
T1A6F4E11263E33C64E5165AB29E29C2E87A1EFB618F4B77DF12146E2F08710F2D172B51
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

36526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SearchPathW BuildCommDCBAndTimeoutsA InterlockedIncrement InterlockedDecrement SetMailslotInfo ZombifyActCtx GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW WaitNamedPipeW EnumTimeFormatsW GetDriveTypeA GetProcessTimes GetVolumePathNameW GetCalendarInfoA GetConsoleAliasExesLengthW GetFileAttributesA SetSystemPowerState GetModuleFileNameW CompareStringW GetShortPathNameA EnumSystemLocalesA GetPrivateProfileIntW GetProfileIntA DeleteFiber HeapCompact GetProcAddress AttachConsole SetComputerNameA EnterCriticalSection GlobalFree OpenWaitableTimerA LoadLibraryA WriteConsoleA GetProcessId InterlockedExchangeAdd LocalAlloc AddAtomA OpenJobObjectW GetPrivateProfileStructA FindNextFileA FindFirstVolumeMountPointA EnumDateFormatsA CreateIoCompletionPort GetModuleHandleA CancelTimerQueueTimer FreeEnvironmentStringsW CreateMailslotA SetCalendarInfoA EnumSystemLocalesW AreFileApisANSI GlobalDeleteAtom GetLastError GetVolumeNameForVolumeMountPointA CreateFileW WriteConsoleW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection WideCharToMultiByte HeapFree HeapAlloc DeleteFileA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException RtlUnwind LCMapStringW MultiByteToWideChar GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetModuleFileNameA GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetUserDefaultLCID GetLocaleInfoA IsValidLocale GetStringTypeW GetConsoleCP GetConsoleMode LoadLibraryW SetStdHandle FlushFileBuffers CloseHandle

gdi32

GetCharABCWidthsA SelectObject

winhttp

WinHttpGetProxyForUrl

Sharing