dc4c90ff7afc701b97de256780991a61a922c3c28c4e1e478793c5b42053dd5d[.]exe

General

Target
dc4c90ff7afc701b97de256780991a61a922c3c28c4e1e478793c5b42053dd5d.exe
Size 753KB
Sample260809-qlqdmsfm6w
SHA256 dc4c90ff7afc701b97de256780991a61a922c3c28c4e1e478793c5b42053dd5d
MD5 46fe1a99be0c8fcfa617314ab9f6e996
SHA1 905a3abae321d0d87f930de5120bd5db281c4153
SHA512 a05c76914d83f8bf82b728319bc33a52663f1689500b1f65c87b003447c97605ca741bf8fca6c26d7bf9a4bc29db0864f3735d6c99b869da4a27abb0fc8bf419
SSDEEP 12288:5zExWbQkSZU0OCbMtKSf6fzACDJx8RGxCkoqVIF3Xl9vYWiLeFYCkja33zhn:hEUQqLtoDbqGAkfVIFV9eIMqNn
TLSH
T17EF40210E2D2643AE2610E7C8D9ACAF51A2BFE713D30D67F3114E53F1AF56718A22761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc4c90ff7afc701b97de256780991a61a922c3c28c4e1e478793c5b42053dd5d.exe

File Explorer

dc4c90ff7afc701b97de256780991a61a922c3c28c4e1e478793c5b42053dd5d.exe

.exe 753KB

dc4c90ff7afc701b97de256780991a61a922c3c28c4e1e478793c5b42053dd5d.exe

IMPHASH 530a3401076a1984b14298cfc00a780a
SHA256 dc4c90ff7afc701b97de256780991a61a922c3c28c4e1e478793c5b42053dd5d
MD5 46fe1a99be0c8fcfa617314ab9f6e996
SHA1 905a3abae321d0d87f930de5120bd5db281c4153
SHA512 a05c76914d83f8bf82b728319bc33a52663f1689500b1f65c87b003447c97605ca741bf8fca6c26d7bf9a4bc29db0864f3735d6c99b869da4a27abb0fc8bf419
SSDEEP 12288:5zExWbQkSZU0OCbMtKSf6fzACDJx8RGxCkoqVIF3Xl9vYWiLeFYCkja33zhn:hEUQqLtoDbqGAkfVIFV9eIMqNn
TLSH
T17EF40210E2D2643AE2610E7C8D9ACAF51A2BFE713D30D67F3114E53F1AF56718A22761
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc SetUnhandledExceptionFilter InterlockedIncrement ReadConsoleOutputAttribute HeapFree GetProfileSectionA SetComputerNameW SetEvent GetNumaAvailableMemoryNode GlobalAlloc LoadLibraryW GetFileAttributesA GetAtomNameW GetModuleFileNameW GetLocaleInfoA SetConsoleTitleA GetConsoleOutputCP SetThreadLocale GetLastError GetCurrentDirectoryW GetProcAddress HeapSize LoadLibraryA SetCalendarInfoW FindAtomA GlobalFindAtomW CreatePipe MultiByteToWideChar LCMapStringW CreateFileA FindNextVolumeMountPointW FileTimeToDosDateTime IsProcessorFeaturePresent WideCharToMultiByte HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle HeapCreate EncodePointer FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetStringTypeW

user32

GetMonitorInfoW

advapi32

OpenThreadToken EqualSid

winhttp

WinHttpOpen

Sharing