b649202c247bb607073c2fcd5660b1b38d48370fff8c5f4b6af3dede4ed45beb[.]exe

General

Target
b649202c247bb607073c2fcd5660b1b38d48370fff8c5f4b6af3dede4ed45beb.exe
Size 676KB
Sample260731-tlehxsdb52
SHA256 b649202c247bb607073c2fcd5660b1b38d48370fff8c5f4b6af3dede4ed45beb
MD5 e6bc2618fa02b51d3b3a82722379ee8f
SHA1 d3141fa0b89d92fbd5498bc78002b8da449ae4c8
SHA512 3f96b46f1027c8a25b9fb1f3ab02ac4247a38a290ed8c5dbd750411827e9ec2732d0337cbffb3adfd5f89347d1dbcf168205b8195f03f3239af2f43eb1697b6f
SSDEEP 12288:LyGn5Cl0+zqhVVfgEypDPlgP8jrCRbqRMYliv+tqcO+lPUM+6u:Ly8CmJhVVfg3+PkrCGRMkiv+qr+lPU6u
TLSH
T1CFE4122177F38476E2B3653410A4D25207BB38B3AE617DAF1FA1162D1DB16C05AB4F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b649202c247bb607073c2fcd5660b1b38d48370fff8c5f4b6af3dede4ed45beb.exe

File Explorer

b649202c247bb607073c2fcd5660b1b38d48370fff8c5f4b6af3dede4ed45beb.exe

.exe 676KB

b649202c247bb607073c2fcd5660b1b38d48370fff8c5f4b6af3dede4ed45beb.exe

IMPHASH 8ed70045ac6ef5b241edfff82b56695b
SHA256 b649202c247bb607073c2fcd5660b1b38d48370fff8c5f4b6af3dede4ed45beb
MD5 e6bc2618fa02b51d3b3a82722379ee8f
SHA1 d3141fa0b89d92fbd5498bc78002b8da449ae4c8
SHA512 3f96b46f1027c8a25b9fb1f3ab02ac4247a38a290ed8c5dbd750411827e9ec2732d0337cbffb3adfd5f89347d1dbcf168205b8195f03f3239af2f43eb1697b6f
SSDEEP 12288:LyGn5Cl0+zqhVVfgEypDPlgP8jrCRbqRMYliv+tqcO+lPUM+6u:Ly8CmJhVVfg3+PkrCGRMkiv+qr+lPU6u
TLSH
T1CFE4122177F38476E2B3653410A4D25207BB38B3AE617DAF1FA1162D1DB16C05AB4F2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

22214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess GlobalFix SetDefaultCommConfigA RemoveVectoredExceptionHandler FindFirstFileW FindFirstChangeNotificationW WriteConsoleInputW WriteConsoleOutputCharacterW lstrlenA GetModuleHandleExA GetConsoleAliasExesA AllocConsole IsBadHugeReadPtr GetProcessIoCounters MapUserPhysicalPages WaitNamedPipeA ZombifyActCtx SetHandleInformation SetConsoleScreenBufferSize WriteConsoleInputA AddConsoleAliasW GetNumaAvailableMemoryNode OpenSemaphoreA GetSystemDefaultLCID MoveFileWithProgressA GenerateConsoleCtrlEvent FindNextVolumeMountPointA GetConsoleAliasesA ReadConsoleW GetWindowsDirectoryA SetCommState GetDriveTypeA GetEnvironmentStrings GlobalAlloc AddRefActCtx GetVolumeInformationA LoadLibraryW CopyFileW _hread CreateEventA GetExitCodeProcess TransactNamedPipe GetConsoleAliasW GetFileAttributesW ReplaceFileW GetCompressedFileSizeA lstrcatA lstrlenW FindNextVolumeMountPointW GetStartupInfoW GetTempPathW GetShortPathNameA GetNamedPipeHandleStateW GetStartupInfoA GetLastError SetLastError ReadConsoleOutputCharacterA CreateConsoleScreenBuffer CreateNamedPipeA EnumSystemCodePagesW SetStdHandle VerLanguageNameW OpenWaitableTimerA UnhandledExceptionFilter AddAtomW RemoveDirectoryW FoldStringW FindNextFileA GetModuleHandleA FatalExit FindNextFileW VirtualProtect GetCurrentDirectoryA CompareStringA GetFileTime QueryPerformanceFrequency SetProcessShutdownParameters FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW ResetWriteWatch GetSystemTime EnumSystemLocalesW lstrcpyW AreFileApisANSI WriteConsoleW SetFilePointer WideCharToMultiByte HeapAlloc DeleteFileA HeapReAlloc GetCommandLineW HeapSetInformation GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW GetCurrentThreadId GetProcAddress SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW Sleep RaiseException RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize CreateFileW

user32

CharUpperW

winhttp

WinHttpReadData

Sharing