d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc[.]exe

General

Target
d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc.exe
Size 793KB
Sample260809-q5vgpsyfjf
SHA256 d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc
MD5 84e5ccdfbdfd9d92456c890e6d8641d4
SHA1 bc1f99c3a86a6a3258e6baa57c26be3a4403146e
SHA512 5f57e132b811e83f167f4b624397262b83982c9781dd05cba20bd2de798fcf1fd010c268060fcdf5601d5c2af1d4a61c2ff8a3ed659a25ceb6a3ef1034b8cf4c
SSDEEP 12288:wtoRocpobWxvcSJj1LT0K85JMR8LNp/tOtMqMXwe/47FXtqtAlkdyiV/M3f:wtlca6F7JHkNp/tOteXvA76Slkdyzf
TLSH
T14C05DF0392E1BD57EA2547329F2EC5FC775DB9108E0A7B9632186E3F14B0172E263B61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc.exe

File Explorer

d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc.exe

.exe 793KB

d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc.exe

IMPHASH fe67952be52176c9a9a2c455c047beed
SHA256 d4b9f4354252a9c203a211d8d600113f9d236ecca6234f43b5aa02350b5b24cc
MD5 84e5ccdfbdfd9d92456c890e6d8641d4
SHA1 bc1f99c3a86a6a3258e6baa57c26be3a4403146e
SHA512 5f57e132b811e83f167f4b624397262b83982c9781dd05cba20bd2de798fcf1fd010c268060fcdf5601d5c2af1d4a61c2ff8a3ed659a25ceb6a3ef1034b8cf4c
SSDEEP 12288:wtoRocpobWxvcSJj1LT0K85JMR8LNp/tOtMqMXwe/47FXtqtAlkdyiV/M3f:wtlca6F7JHkNp/tOteXvA76Slkdyzf
TLSH
T14C05DF0392E1BD57EA2547329F2EC5FC775DB9108E0A7B9632186E3F14B0172E263B61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8819

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hipaxiya-husagi\wivagi\honacet\kaxex.pdb

kernel32

AddConsoleAliasW GetComputerNameW CreateDirectoryExA GetFileAttributesExA GetTickCount GetNumberFormatA GetConsoleTitleA GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW GetConsoleAliasW WriteConsoleW InterlockedCompareExchange GetProcAddress VirtualAlloc HeapSize VerLanguageNameA RemoveDirectoryA SetComputerNameA LoadLibraryA GetFileType SetFileApisToANSI EnumResourceTypesW GetModuleHandleA CreateWaitableTimerW GetCurrentProcessId GetVolumeInformationW CreateFileA QueryDosDeviceA InterlockedDecrement SetLastError GetTempFileNameW GetCommandLineA GetStartupInfoA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError Sleep ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection HeapFree SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile SetStdHandle GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle

user32

EnableWindow CharUpperBuffW

advapi32

DeregisterEventSource DeleteAce AreAllAccessesGranted

Sharing