31e4aae7b9c2afff4247b1132acf5c8473da93ccd087d95f35f019b9ae9659a1

General

Target
31e4aae7b9c2afff4247b1132acf5c8473da93ccd087d95f35f019b9ae9659a1
Size 335KB
Sample230505-pjapqscc61
SHA256 31e4aae7b9c2afff4247b1132acf5c8473da93ccd087d95f35f019b9ae9659a1
MD5 dcb22db0081d31b40f4444b3dfd5a838
SHA1 bb1daac9ce32b6493791765ca6ea7dafabebddb1
SHA512 ae5e3ebe02e184154a68e6f107c339ab155e2fb42c273b2d232a5283c532eaf1ead4011218b5bbd1ddcb0989bb2a839676a58149316fad3b52bab5451fb43bfe
SSDEEP 6144:UggdMXQv5VN7uUaj5+rJ4hma+uhVEXvQdENol:5g6XQBVFuUaF+rUHhVEXoGNC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31e4aae7b9c2afff4247b1132acf5c8473da93ccd087d95f35f019b9ae9659a1

File Explorer

31e4aae7b9c2afff4247b1132acf5c8473da93ccd087d95f35f019b9ae9659a1

.exe 335KB

31e4aae7b9c2afff4247b1132acf5c8473da93ccd087d95f35f019b9ae9659a1

IMPHASH d99583c7328832f72f725b70f2ec4ccf
SHA256 31e4aae7b9c2afff4247b1132acf5c8473da93ccd087d95f35f019b9ae9659a1
MD5 dcb22db0081d31b40f4444b3dfd5a838
SHA1 bb1daac9ce32b6493791765ca6ea7dafabebddb1
SHA512 ae5e3ebe02e184154a68e6f107c339ab155e2fb42c273b2d232a5283c532eaf1ead4011218b5bbd1ddcb0989bb2a839676a58149316fad3b52bab5451fb43bfe
SSDEEP 6144:UggdMXQv5VN7uUaj5+rJ4hma+uhVEXvQdENol:5g6XQBVFuUaF+rUHhVEXoGNC
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35141

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA GetDriveTypeW GetNumberOfConsoleInputEvents BuildCommDCBAndTimeoutsA InterlockedIncrement EnumCalendarInfoW SetDefaultCommConfigW GetProfileSectionA SetComputerNameW CallNamedPipeW MoveFileWithProgressA GetTickCount ReadConsoleW SetCommState GetDriveTypeA GetVolumePathNameW GetPrivateProfileIntA LoadLibraryW FreeConsole GetConsoleAliasExesLengthW InterlockedPopEntrySList GetFileAttributesA GetOverlappedResult GetProfileIntA ReleaseActCtx GetStdHandle GetCurrentDirectoryW GetProcAddress BeginUpdateResourceW SetFirmwareEnvironmentVariableW RemoveDirectoryA VerLanguageNameW SearchPathA PrepareTape LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW AddAtomW GlobalWire GetModuleFileNameA FindNextFileA EnumDateFormatsA GetModuleHandleA SetLocaleInfoW lstrcatW FreeEnvironmentStringsW GetStringTypeW SetThreadAffinityMask SetFileShortNameA GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak GlobalReAlloc EnumSystemLocalesW WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError MoveFileA HeapFree HeapAlloc DeleteFileA GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate WriteFile GetModuleFileNameW HeapSize CloseHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleW SetFilePointer CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

31e4aae7b9c2afff4247b1132acf5c8473da93ccd087d95f35f019b9ae9659a1

kernel32