𝗦𝗘𝗧𝗨𝗣[.]exe

General

Target
𝗦𝗘𝗧𝗨𝗣.exe
Size 679KB
Sample260919-pgr61afc49
SHA256 9e8ef2bc426a27075d7c7d7304643748ac4be7dec0118e7f4e7ba04bea5caa48
MD5 2ebabd2a27c8c915183a76f5935bd0aa
SHA1 4260c38d0a3db9378891007812516d56f224125e
SHA512 15bcba51b464f271fcf001936b2d444cc8c1f8c265896f42e024791c533bb00bdf024d98da13f23dbf1e9c7559b37680064d3310840b11bf680d323541e0badd
SSDEEP 12288:jfo+eUTuNGWb7fBNgcaInjES/mnrIWEG1ncJgk20/+9yPU7GncsBjy+00fRe:jfo+eiuNGM/rfQWWbfqJt20/iMOyf4
TLSH
T186E4F1627BD467F8D025A539400C285AE9B1BC1157A499DF9BBC4A6B0F2FDC22D32F24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
𝗦𝗘𝗧𝗨𝗣.exe

File Explorer

𝗦𝗘𝗧𝗨𝗣.exe

.exe 679KB

𝗦𝗘𝗧𝗨𝗣.exe

IMPHASH 92490acf0370fd21d2a7bb0a68acf0af
SHA256 9e8ef2bc426a27075d7c7d7304643748ac4be7dec0118e7f4e7ba04bea5caa48
MD5 2ebabd2a27c8c915183a76f5935bd0aa
SHA1 4260c38d0a3db9378891007812516d56f224125e
SHA512 15bcba51b464f271fcf001936b2d444cc8c1f8c265896f42e024791c533bb00bdf024d98da13f23dbf1e9c7559b37680064d3310840b11bf680d323541e0badd
SSDEEP 12288:jfo+eUTuNGWb7fBNgcaInjES/mnrIWEG1ncJgk20/+9yPU7GncsBjy+00fRe:jfo+eiuNGM/rfQWWbfqJt20/iMOyf4
TLSH
T186E4F1627BD467F8D025A539400C285AE9B1BC1157A499DF9BBC4A6B0F2FDC22D32F24
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

61056

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ieuckseausch.pdb

kernel32

IsThreadAFiber GetCommandLineW GetThreadId HeapSize GetProcessHeaps GetSystemDefaultLCID GetCurrentThread GetUserDefaultLCID GetCommandLineA GetSystemDefaultLangID GetUserDefaultUILanguage GetModuleHandleW GetEnvironmentStringsW WaitForSingleObject CloseHandle IsDBCSLeadByte GetCPInfo GetFileInformationByHandleEx SetFilePointerEx GetFileInformationByHandle GetStdHandle TryAcquireSRWLockExclusive GetConsoleMode ReleaseSRWLockExclusive SetFileInformationByHandle MultiByteToWideChar LoadLibraryA IsValidCodePage HeapReAlloc GetConsoleCP GetSystemDefaultUILanguage GetConsoleWindow HeapAlloc GetFileType GetThreadLocale GetFullPathNameW SetFileTime CreateFileW GetConsoleOutputCP FlushFileBuffers LCMapStringW CompareStringW GetProcAddress GetModuleHandleA SetLastError HeapFree GetProcessHeap WriteConsoleW GetLastError QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlUnwindEx FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW GetACP GetOEMCP WideCharToMultiByte FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW VirtualProtect LoadLibraryExW WriteFile

ntdll

NtWriteFile RtlNtStatusToDosError NtReadFile

user32

GetDesktopWindow GetShellWindow GetMessageExtraInfo GetFocus GetActiveWindow

winmm

joyGetNumDevs midiInGetNumDevs waveOutGetNumDevs timeGetTime midiOutGetNumDevs mixerGetNumDevs

Sharing