e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b.exe
Size 324KB
Sample260925-t8sn3awset
SHA256 e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b
MD5 46cd6b5771442308a5211038e3721f8c
SHA1 607a475d11191d269d89c4175fe6871149258028
SHA512 56b09461e22de6b52d46e6e0217093882bb62f8dcdf6af2d232a8e10a9731931f4bc51f23811010658ec3f441465939067a45004edd6abb939f3671ee29e0bd5
SSDEEP 6144:nuYjzcrl7TTFAk9mWvBwJ+1kyUbasEBzbcqGwdqPuGm0:nuYgTFBgMKQkp4XcqZ1
TLSH
T189646B127FA08A7AC3E329364F938F7962B9BC514E3197832342270DDE755A1C72375A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b.exe

File Explorer

e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b.exe

.exe 324KB

e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b.exe

IMPHASH cb20163e28e6ea8fab2ca5e66992cb61
SHA256 e9e5209ff937e49e34e4c17419aad97b3931cd189a7f28333385c6fe9eef561b
MD5 46cd6b5771442308a5211038e3721f8c
SHA1 607a475d11191d269d89c4175fe6871149258028
SHA512 56b09461e22de6b52d46e6e0217093882bb62f8dcdf6af2d232a8e10a9731931f4bc51f23811010658ec3f441465939067a45004edd6abb939f3671ee29e0bd5
SSDEEP 6144:nuYjzcrl7TTFAk9mWvBwJ+1kyUbasEBzbcqGwdqPuGm0:nuYgTFBgMKQkp4XcqZ1
TLSH
T189646B127FA08A7AC3E329364F938F7962B9BC514E3197832342270DDE755A1C72375A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemInfo VirtualQuery GetStartupInfoA GetCommandLineA ExitProcess TerminateProcess HeapReAlloc HeapSize SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings VirtualAlloc GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA VirtualProtect HeapFree HeapAlloc RtlUnwind GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime SetErrorMode FileTimeToSystemTime GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedIncrement WritePrivateProfileStringA GlobalReAlloc InterlockedDecrement SetLastError MulDiv FormatMessageA LocalFree GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW lstrcpynA GlobalUnlock GlobalFree FreeResource CloseHandle GlobalAddAtomA GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc FreeLibrary GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA LoadLibraryA CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion GetLastError MultiByteToWideChar LoadLibraryExW WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetVersionExA GetThreadLocale GetLocaleInfoA GetACP FreeEnvironmentStringsW InterlockedExchange

user32

ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor DestroyMenu EqualRect GetClassInfoA RegisterClassA UnregisterClassA EndPaint GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SendMessageA DrawIcon AppendMenuA GetSystemMenu IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics InvalidateRect IsWindow CharUpperA SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem wsprintfA TabbedTextOutA DrawTextA DrawTextExA EndDialog SetMenuItemBitmaps GetFocus ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA ClientToScreen GetDC ReleaseDC GetWindowDC AdjustWindowRectEx BeginPaint PostMessageA PostQuitMessage SetCursor IsWindowEnabled GetLastActivePopup GetWindowLongA GetParent MessageBoxA ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage SetCapture LoadCursorA ReleaseCapture GetSysColorBrush PostThreadMessageA RegisterClipboardFormatA MessageBeep GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableA SetRect IsRectEmpty CharNextA GrayStringA

gdi32

DeleteDC GetStockObject CreateRectRgnIndirect ExtSelectClipRgn GetTextColor GetRgnBox GetMapMode ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetBkColor CreateBitmap DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetDeviceCaps GetObjectA SetBkColor SetTextColor GetClipBox

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SysAllocString SafeArrayDestroy SystemTimeToVariantTime OleCreateFontIndirect SysAllocStringByteLen SysStringLen VariantInit VariantChangeType VariantClear SysAllocStringLen SysFreeString

odbc32

ord51 ord50 ord45 ord44 ord68 ord43 ord59 ord13 ord18 ord46 ord12 ord19 ord11 ord49 ord48 ord8 ord20 ord16 ord3 ord14 ord9 ord15 ord1 ord2 ord10 ord41 ord17 ord5