A8B50F1767FFE24416B671820377036B[.]exe

General

Target
A8B50F1767FFE24416B671820377036B.exe
Size 5.6MB
Sample260907-ed5mtaee93
SHA256 3c1aa8627871e0c1d698e0854d482f5f6e7323b6c65e2488efa264fc5436c0d5
MD5 a8b50f1767ffe24416b671820377036b
SHA1 55d6ac8ea97ccfc0d0bea16bf3c4f6a0609f46b8
SHA512 67822a375e79cf8a06a7dd5105d373473e631488bf2f4d0b13193eb1671cb1e780c17bb68a1e0fe8cc16e1607c424732ec07bd1a3163e173e50c568eb4573d6d
SSDEEP 98304:9hDq6qXCP7yKPNmxecLushvf7UQIYWuxmKeAK12QzwdTgvV/RQebJF:TDq6UE7ovRQzK86e/
TLSH
T1B8567C30764AC52BDA7E01B0292CDA9F556D7E720B7154D7B3DC2E6E1AB48C20732E27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
A8B50F1767FFE24416B671820377036B.exe

File Explorer

A8B50F1767FFE24416B671820377036B.exe

.exe 5.6MB

A8B50F1767FFE24416B671820377036B.exe

IMPHASH 836688c7d21e39394af41ce9a8c2d728
SHA256 3c1aa8627871e0c1d698e0854d482f5f6e7323b6c65e2488efa264fc5436c0d5
MD5 a8b50f1767ffe24416b671820377036b
SHA1 55d6ac8ea97ccfc0d0bea16bf3c4f6a0609f46b8
SHA512 67822a375e79cf8a06a7dd5105d373473e631488bf2f4d0b13193eb1671cb1e780c17bb68a1e0fe8cc16e1607c424732ec07bd1a3163e173e50c568eb4573d6d
SSDEEP 98304:9hDq6qXCP7yKPNmxecLushvf7UQIYWuxmKeAK12QzwdTgvV/RQebJF:TDq6UE7ovRQzK86e/
TLSH
T1B8567C30764AC52BDA7E01B0292CDA9F556D7E720B7154D7B3DC2E6E1AB48C20732E27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1654644

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\JobRelease\win\Release\stubs\x86\ExternalUi.pdb

kernel32

CreateFileW CloseHandle WriteFile DeleteFileW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW RemoveDirectoryW GetTempPathW GetTempFileNameW CreateDirectoryW MoveFileW GetLastError EnterCriticalSection LeaveCriticalSection GetModuleFileNameW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetCurrentThreadId RaiseException SetLastError GlobalUnlock GlobalLock GlobalAlloc MulDiv lstrcmpW CreateEventW FindClose FindFirstFileW GetFullPathNameW SetEvent InitializeCriticalSection lstrcpynW CreateThread WaitForSingleObject GetProcAddress LoadLibraryExW Sleep GetDiskFreeSpaceExW DecodePointer GetExitCodeThread GetCurrentProcessId FreeLibrary GetSystemDirectoryW lstrlenW VerifyVersionInfoW VerSetConditionMask lstrcmpiW GetModuleHandleW LoadLibraryW GetDriveTypeW CompareStringW FindNextFileW GetLogicalDriveStringsW GetFileSize GetFileAttributesW GetShortPathNameW SetFileAttributesW GetFileTime CopyFileW ReadFile SetFilePointer SystemTimeToFileTime MultiByteToWideChar WideCharToMultiByte GetCurrentProcess GetSystemInfo WaitForMultipleObjects VirtualProtect VirtualQuery LoadLibraryExA GetStringTypeW SetUnhandledExceptionFilter FormatMessageW FileTimeToSystemTime GetEnvironmentVariableW GetEnvironmentStringsW LocalFree InitializeCriticalSectionEx LoadLibraryA GetModuleFileNameA GetCurrentThread GetConsoleOutputCP FlushFileBuffers SetConsoleTextAttribute GetStdHandle GetConsoleScreenBufferInfo OutputDebugStringW CreateProcessW GetExitCodeProcess GetTickCount GetCommandLineW SetCurrentDirectoryW SetEndOfFile EnumResourceLanguagesW GetLocaleInfoW GetSystemDefaultLangID GetUserDefaultLangID GetWindowsDirectoryW GetSystemTime GetDateFormatW GetTimeFormatW CreateToolhelp32Snapshot Process32FirstW Process32NextW ResetEvent GlobalFree GetPrivateProfileStringW GetPrivateProfileSectionNamesW WritePrivateProfileStringW GetLocalTime CreateNamedPipeW ConnectNamedPipe Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection IsWow64Process TerminateThread LocalAlloc CompareFileTime CopyFileExW OpenEventW PeekNamedPipe QueryPerformanceCounter QueryPerformanceFrequency EncodePointer LCMapStringEx GetSystemTimeAsFileTime CompareStringEx GetCPInfo IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree WaitForSingleObjectEx UnhandledExceptionFilter TerminateProcess GetStartupInfoW RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetFileType GetTimeZoneInformation LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleMode IsValidCodePage GetACP GetOEMCP GetFileSizeEx SetFilePointerEx FindFirstFileExW GetCommandLineA FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle ReadConsoleW WriteConsoleW

Sharing