Madium-Executor_800246[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Madium-Executor_800246.exe
Size 26.4MB
Sample261110-v3qsyshc88
SHA256 cac8282a040a5fe7fe2c5aaad1481cb2f0e739f93a87010f90917a481f806fd9
MD5 255ce5b108280db3f71c99e59b6ad63b
SHA1 0bdb10aa2718eb5a0ac4b46120dafa30c2d05937
SHA512 0418befc13bd0f17ce9e7dd211ab5a36dfb1e01fc483577b81d0f320ddd6adba0c91978764f226a6701a2eddf251ddccaf7c513176207ed5b93902f65e76f655
SSDEEP 786432:0ZHjnaLnSZMnvkdbXpemzxfJOe3dNMABML7cd+/:0ljajyNB5vzPdtNZWL7cd0
TLSH
T10C572357B602A0FBC7474174B01ED72ECA23775A5328C9DFD2949DA8ECA53E05832E2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Madium-Executor_800246.exe

File Explorer

Madium-Executor_800246.exe

.exe 26.4MB

Madium-Executor_800246.exe

IMPHASH 8d849df5b8137f6a20b80802b726fd2c
SHA256 cac8282a040a5fe7fe2c5aaad1481cb2f0e739f93a87010f90917a481f806fd9
MD5 255ce5b108280db3f71c99e59b6ad63b
SHA1 0bdb10aa2718eb5a0ac4b46120dafa30c2d05937
SHA512 0418befc13bd0f17ce9e7dd211ab5a36dfb1e01fc483577b81d0f320ddd6adba0c91978764f226a6701a2eddf251ddccaf7c513176207ed5b93902f65e76f655
SSDEEP 786432:0ZHjnaLnSZMnvkdbXpemzxfJOe3dNMABML7cd+/:0ljajyNB5vzPdtNZWL7cd0
TLSH
T10C572357B602A0FBC7474174B01ED72ECA23775A5328C9DFD2949DA8ECA53E05832E2D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1977795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

bundleforge_stub.pdb

kernel32

GetLongPathNameW GetSystemTimePreciseAsFileTime WideCharToMultiByte FindFirstFileW FindNextFileW FindClose GetTickCount GetTempPathW CreateDirectoryW CopyFileW CreateProcessW Sleep AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread GetOverlappedResult PostQueuedCompletionStatus WriteFile ReadFile GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes SetLastError GetFinalPathNameByHandleW CancelIoEx CreateFileW GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext GetProcAddress GetLastError WaitForSingleObjectEx LoadLibraryA lstrlenW GetCurrentProcessId CreateMutexA GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW QueryPerformanceFrequency FormatMessageW QueryPerformanceCounter SetHandleInformation GetModuleHandleA GetFullPathNameW SetFileTime FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx ExitProcess CreateWaitableTimerExW SetWaitableTimer SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime SetFileInformationByHandle DeleteFileW CreateThread TerminateProcess WaitForSingleObject OpenProcess Process32NextW Process32FirstW Module32NextW Module32FirstW CreateToolhelp32Snapshot GetModuleFileNameW GetCommandLineW GetModuleHandleW CloseHandle GetCurrentProcess HeapReAlloc HeapFree ReleaseMutex GetProcessHeap IsProcessorFeaturePresent

ole32

CoTaskMemFree CoInitializeEx

uxtheme

SetWindowTheme

psapi

GetModuleBaseNameA EnumProcesses EnumProcessModules GetProcessImageFileNameW

user32

LoadIconW UpdateWindow PeekMessageW SetWindowLongW FindWindowW IsWindow SetWindowPos DestroyWindow KillTimer SetTimer DefWindowProcW SetForegroundWindow ShowWindow SendMessageW CreateWindowExW GetSystemMetrics AdjustWindowRectEx RegisterClassW LoadCursorW SetProcessDPIAware AllowSetForegroundWindow GetSysColor FillRect GetSysColorBrush GetClientRect GetWindowTextW SetWindowTextW MessageBoxW GetWindowTextLengthW GetMessageW TranslateMessage SetFocus DispatchMessageW GetWindowLongW

advapi32

OpenProcessToken GetUserNameW OpenSCManagerW EnumServicesStatusW CloseServiceHandle RegOpenKeyExW RegQueryValueExW RegCloseKey SystemFunction036 OpenServiceW QueryServiceStatus RegEnumKeyExW GetTokenInformation

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFolderPathW ShellExecuteW SHGetFileInfoW

comctl32

InitCommonControlsEx

gdi32

SetBkColor SetTextColor GetStockObject

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ws2_32

setsockopt recv closesocket WSASocketW ioctlsocket WSAIoctl WSASend shutdown send freeaddrinfo getaddrinfo WSAStartup getsockopt getsockname WSAGetLastError getpeername connect bind WSACleanup

ntdll

NtCancelIoFileEx NtDeviceIoControlFile RtlNtStatusToDosError NtWriteFile NtReadFile NtCreateFile

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

vcruntime140

__current_exception_context __current_exception __CxxFrameHandler3 _CxxThrowException memmove memset memcmp memcpy _except_handler4_common

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

__p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback __p___argc _exit exit _initterm_e _initterm _controlfp_s _crt_atexit _register_onexit_function _get_initial_narrow_environment _initialize_narrow_environment terminate _initialize_onexit_table _configure_narrow_argv _set_app_type _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free