92ff907d823740d5bc0263eccb4ddf72ad290f26032d8835b8682a3d75a1f14e[.]exe

General

Target
92ff907d823740d5bc0263eccb4ddf72ad290f26032d8835b8682a3d75a1f14e.exe
Size 689KB
Sample260809-tgadeahn8w
SHA256 92ff907d823740d5bc0263eccb4ddf72ad290f26032d8835b8682a3d75a1f14e
MD5 63ba6c124b825c4ce68df30e30aeea23
SHA1 b1644bf1604a505e8a4750f2e6800378b31662c5
SHA512 57cfc25b821ca8a2ccfc836dcaea260d6c2ed9e04d629ef5005d66d8951eba8d2ae1fc4d12c4883303145d76c6b004d27fbf85fd56f1a7c5b075da267e08c68f
SSDEEP 12288:Dti/+udoW7vC5A1ZxnkWLc8RxsfcFk237TYz2HxjD5iEHlTnxhD2FdDvB:D0/NoW+QZBkyxccFJ7TYQUEFTXs9vB
TLSH
T1E1E41234B3D09072D1A74A305AB4DAB24B7BB9332776E88777245B394D701E08EAA753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92ff907d823740d5bc0263eccb4ddf72ad290f26032d8835b8682a3d75a1f14e.exe

File Explorer

92ff907d823740d5bc0263eccb4ddf72ad290f26032d8835b8682a3d75a1f14e.exe

.exe 689KB

92ff907d823740d5bc0263eccb4ddf72ad290f26032d8835b8682a3d75a1f14e.exe

IMPHASH 3eb61bde6c067dec159cc6a0cbd631b3
SHA256 92ff907d823740d5bc0263eccb4ddf72ad290f26032d8835b8682a3d75a1f14e
MD5 63ba6c124b825c4ce68df30e30aeea23
SHA1 b1644bf1604a505e8a4750f2e6800378b31662c5
SHA512 57cfc25b821ca8a2ccfc836dcaea260d6c2ed9e04d629ef5005d66d8951eba8d2ae1fc4d12c4883303145d76c6b004d27fbf85fd56f1a7c5b075da267e08c68f
SSDEEP 12288:Dti/+udoW7vC5A1ZxnkWLc8RxsfcFk237TYz2HxjD5iEHlTnxhD2FdDvB:D0/NoW+QZBkyxccFJ7TYQUEFTXs9vB
TLSH
T1E1E41234B3D09072D1A74A305AB4DAB24B7BB9332776E88777245B394D701E08EAA753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

24066

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetTempFileNameW FindResourceA FindFirstFileW WriteConsoleOutputCharacterW lstrlenA GetModuleHandleExA GetLocaleInfoA SetLocalTime CommConfigDialogA MapUserPhysicalPages GlobalAddAtomA GetConsoleAliasA SetDefaultCommConfigW SetHandleInformation SetConsoleScreenBufferSize WriteConsoleInputA OpenSemaphoreA GetSystemDefaultLCID _lclose CreateNamedPipeW FindNextVolumeMountPointA GetConsoleAliasesA GetWindowsDirectoryA GetConsoleAliasExesW WaitNamedPipeW GetCommandLineA SetCommTimeouts GetDriveTypeA GetEnvironmentStrings LoadLibraryW CopyFileW _hread CreateEventA GetFileAttributesA GetExitCodeProcess EnumSystemCodePagesA ReplaceFileW ReadFile GetCompressedFileSizeA CompareStringW lstrlenW SetConsoleTitleA DeactivateActCtx GetShortPathNameA GetStartupInfoA GetLastError GetCurrentDirectoryW SetLastError AttachConsole VerLanguageNameA SetVolumeLabelW RemoveDirectoryA CopyFileA SetComputerNameA UnhandledExceptionFilter LocalAlloc SetConsoleCtrlHandler SetThreadIdealProcessor AddAtomA SetCommMask FoldStringW GetModuleHandleA GetProcessShutdownParameters GetCommTimeouts lstrcatW FindNextFileW VirtualProtect GetCurrentDirectoryA GetFileTime GetConsoleCursorInfo QueryPerformanceFrequency ReadConsoleInputW TerminateJobObject FindAtomW MoveFileWithProgressW ResetWriteWatch ReadConsoleOutputCharacterW EnumSystemLocalesW DeleteFileA lstrcpyA CreateFileW HeapSize WideCharToMultiByte HeapFree HeapAlloc HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW GetCurrentThreadId GetProcAddress SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW Sleep SetFilePointer GetConsoleCP GetConsoleMode RaiseException RtlUnwind SetStdHandle FlushFileBuffers WriteConsoleW

user32

CharUpperW

winhttp

WinHttpWriteData

Sharing