SegundoExamen[.]exe

General

Target
SegundoExamen.exe
Size 15KB
Sample261102-elfzeszyaz
SHA256 961a8d0a307798c1259117583a763aec2b23ce65522d73a9cace480bba79bacd
MD5 d30e159e2dfb09999302841ddf7db2c0
SHA1 caa7a1dc7b5a37fb8154cb0edcf12f9c28ce541c
SHA512 0f43a7ef41387b6f8eb436589c48bf6c530d2cfede5a8b0ea9c1f304ec050d150eb4e7e357dcb9ffa705f72b0ebebbbb8e8576c40169835f5eee87b93e83d74e
SSDEEP 192:5UOzGIMZW6RtDA+cfp6G+u25DT7jF6ZIhq3Q5tfdL5mffeXgJvN:SOzGIMZW6vASu2FjF6ZIhq3uul
TLSH
T18262299A6E718CEDD1E4C336C4530924F07AF2F28623D7CBCBE748521D15182BE2D658
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SegundoExamen.exe

File Explorer

SegundoExamen.exe

.exe 15KB

SegundoExamen.exe

IMPHASH 265eb04191c2a24710221e1354a90dac
SHA256 961a8d0a307798c1259117583a763aec2b23ce65522d73a9cace480bba79bacd
MD5 d30e159e2dfb09999302841ddf7db2c0
SHA1 caa7a1dc7b5a37fb8154cb0edcf12f9c28ce541c
SHA512 0f43a7ef41387b6f8eb436589c48bf6c530d2cfede5a8b0ea9c1f304ec050d150eb4e7e357dcb9ffa705f72b0ebebbbb8e8576c40169835f5eee87b93e83d74e
SSDEEP 192:5UOzGIMZW6RtDA+cfp6G+u25DT7jF6ZIhq3Q5tfdL5mffeXgJvN:SOzGIMZW6vASu2FjF6ZIhq3uul
TLSH
T18262299A6E718CEDD1E4C336C4530924F07AF2F28623D7CBCBE748521D15182BE2D658
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5472

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

Sleep CreateThread HeapAlloc GetProcAddress VirtualAlloc GetModuleHandleW GetConsoleWindow RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter HeapFree VirtualProtect GetProcessHeap GetModuleFileNameA SetUnhandledExceptionFilter GetCurrentProcess RtlCaptureContext TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId

user32

ShowWindow

advapi32

RegSetValueExA RegOpenKeyExA RegCloseKey

vcruntime140

__current_exception memset memcpy __current_exception_context strrchr __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table terminate _seh_filter_exe _register_onexit_function _set_app_type _crt_atexit _c_exit _cexit __p___argv _register_thread_local_exe_atexit_callback _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing