d39ffc528888daec2f64e122a862f9ee8e327d904e7b51a7ce89a5f73432b391[.]exe

General

Target
d39ffc528888daec2f64e122a862f9ee8e327d904e7b51a7ce89a5f73432b391.exe
Size 825KB
Sample260809-mch2esdm8z
SHA256 d39ffc528888daec2f64e122a862f9ee8e327d904e7b51a7ce89a5f73432b391
MD5 44a433365d505523abf954a74b4c1343
SHA1 62f403f1550a6d9534c226dcf06ef80802070510
SHA512 edbc7180ce265feb1bd6edc8f3929d2dd8473f4ef50fbdd0decec524666cd725efe1cab446fd2af542d1e4b761295c906953690757ac86f7bbd7a0f299164f6a
SSDEEP 12288:gvuSV90FUjXlq5wltoyRrFPiOIA8PGm5twpzx3Z9Sdd3anwcyy:gvx+FUjXgUJ9iOwr5U39jwNy
TLSH
T1640522627571C4B2E9AA4530B120EBA26BFF75301879C00B3FB44BAD1D613D1E6B670B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d39ffc528888daec2f64e122a862f9ee8e327d904e7b51a7ce89a5f73432b391.exe

File Explorer

d39ffc528888daec2f64e122a862f9ee8e327d904e7b51a7ce89a5f73432b391.exe

.exe 825KB

d39ffc528888daec2f64e122a862f9ee8e327d904e7b51a7ce89a5f73432b391.exe

IMPHASH a0ac95739c763bb58b1023ed75bb0bb7
SHA256 d39ffc528888daec2f64e122a862f9ee8e327d904e7b51a7ce89a5f73432b391
MD5 44a433365d505523abf954a74b4c1343
SHA1 62f403f1550a6d9534c226dcf06ef80802070510
SHA512 edbc7180ce265feb1bd6edc8f3929d2dd8473f4ef50fbdd0decec524666cd725efe1cab446fd2af542d1e4b761295c906953690757ac86f7bbd7a0f299164f6a
SSDEEP 12288:gvuSV90FUjXlq5wltoyRrFPiOIA8PGm5twpzx3Z9Sdd3anwcyy:gvx+FUjXgUJ9iOwr5U39jwNy
TLSH
T1640522627571C4B2E9AA4530B120EBA26BFF75301879C00B3FB44BAD1D613D1E6B670B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1024000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mekitupa\lepihukey\rako\zobe.pdb

kernel32

FreeEnvironmentStringsA GetConsoleAliasesLengthA ReadConsoleW CreateDirectoryExW GetSystemDirectoryW LoadLibraryW InitializeCriticalSectionAndSpinCount CreateEventA LeaveCriticalSection LocalHandle GetBinaryTypeW CompareStringW lstrlenW ReplaceFileA FreeLibraryAndExitThread SetLastError MapViewOfFile AttachConsole VirtualAlloc SetStdHandle GetAtomNameA WriteConsoleA LocalAlloc SetCalendarInfoW WriteProfileSectionW SetConsoleWindowInfo GetModuleFileNameA GetModuleHandleA FindFirstChangeNotificationA VirtualProtect GetCPInfoExA CloseHandle BindIoCompletionCallback SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetLastError HeapReAlloc HeapAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize EnterCriticalSection SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree LoadLibraryA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA

user32

ClientToScreen

Sharing