d148dedc9b654f78a2ddd2298663df99d57d00cdec9e97a3722496cc51c60701[.]exe

General

Target
d148dedc9b654f78a2ddd2298663df99d57d00cdec9e97a3722496cc51c60701.exe
Size 732KB
Sample260809-n2vxyszygx
SHA256 d148dedc9b654f78a2ddd2298663df99d57d00cdec9e97a3722496cc51c60701
MD5 cdc4132b29e414f192431cf17c959a56
SHA1 a26f541c8130c404020d76d98b4fb4c3c9600f99
SHA512 d85935b75ce1a78b026ccc2e015c1cf1e3013114a8ba0f2e48c2bc4d93cdbd913f18016214335c5111c491716f7a823e58366fb4a37778d32be78478ed128eef
SSDEEP 12288:HLtTB27VeNWombj8dJBpuz4I3hrJAb8hWzmYe9VOucjSdsdfyv:rtUJ6W7WEcENAbbqmSdsNyv
TLSH
T1B9F41230A2F58437E2B345782D3087728F26BCA59BA1C98F6BD6463D5E71282DE1C752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d148dedc9b654f78a2ddd2298663df99d57d00cdec9e97a3722496cc51c60701.exe

File Explorer

d148dedc9b654f78a2ddd2298663df99d57d00cdec9e97a3722496cc51c60701.exe

.exe 732KB

d148dedc9b654f78a2ddd2298663df99d57d00cdec9e97a3722496cc51c60701.exe

IMPHASH ce771cc7f72cb42764d30ed3fa34abca
SHA256 d148dedc9b654f78a2ddd2298663df99d57d00cdec9e97a3722496cc51c60701
MD5 cdc4132b29e414f192431cf17c959a56
SHA1 a26f541c8130c404020d76d98b4fb4c3c9600f99
SHA512 d85935b75ce1a78b026ccc2e015c1cf1e3013114a8ba0f2e48c2bc4d93cdbd913f18016214335c5111c491716f7a823e58366fb4a37778d32be78478ed128eef
SSDEEP 12288:HLtTB27VeNWombj8dJBpuz4I3hrJAb8hWzmYe9VOucjSdsdfyv:rtUJ6W7WEcENAbbqmSdsNyv
TLSH
T1B9F41230A2F58437E2B345782D3087728F26BCA59BA1C98F6BD6463D5E71282DE1C752
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18788

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW HeapCompact SetEndOfFile LocalCompact CreateHardLinkA EnumResourceTypesA GlobalAlloc LoadLibraryW IsProcessInJob AssignProcessToJobObject CreateEventA IsBadWritePtr GetLastError GetCurrentDirectoryW SetLastError GetProcAddress IsBadHugeWritePtr VerLanguageNameA SetConsoleCtrlHandler AddAtomW GlobalHandle Module32FirstW GetModuleFileNameA GetOEMCP HeapSetInformation GetFileTime GetCurrentThreadId GetDiskFreeSpaceExA ReadConsoleInputW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate ReadFile WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc CreateFileW

user32

CharUpperBuffA SetCursorPos SetCaretPos GetCaretBlinkTime GetMessageTime ChangeMenuW

Sharing