b4831e1839e1dbec149ebb2b370b10bb[.]exe

General

Target
b4831e1839e1dbec149ebb2b370b10bb.exe
Size 461KB
Sample230725-hvdr7sbb43
SHA256 33ff3a4b4d8c3e465ad7718d651f2a4e7d1327efe50726e2396284e2dbca9763
MD5 b4831e1839e1dbec149ebb2b370b10bb
SHA1 a5b2fcd5fcd713dd42ea5364161518141f8a3635
SHA512 020bfdb3aea3be035574b729b6e8d7c06a1d3e268cb42ec313bc4dea0d8d2d9cf3ae907f013a8dc5d532daaa812f732d76bfdddfe00b118e4a3193f730aa1fc6
SSDEEP 6144:CEUkILKdMM2zpvrtVpVCT0n31IoRzJewNY5HE/Ld1ETj:VUzWdMjpZV/qoRzIwOSdO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4831e1839e1dbec149ebb2b370b10bb.exe

File Explorer

b4831e1839e1dbec149ebb2b370b10bb.exe

.exe 461KB

b4831e1839e1dbec149ebb2b370b10bb.exe

IMPHASH 020eb28774c582d508abf5443eb41b9c
SHA256 33ff3a4b4d8c3e465ad7718d651f2a4e7d1327efe50726e2396284e2dbca9763
MD5 b4831e1839e1dbec149ebb2b370b10bb
SHA1 a5b2fcd5fcd713dd42ea5364161518141f8a3635
SHA512 020bfdb3aea3be035574b729b6e8d7c06a1d3e268cb42ec313bc4dea0d8d2d9cf3ae907f013a8dc5d532daaa812f732d76bfdddfe00b118e4a3193f730aa1fc6
SSDEEP 6144:CEUkILKdMM2zpvrtVpVCT0n31IoRzJewNY5HE/Ld1ETj:VUzWdMjpZV/qoRzIwOSdO
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24192

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW CreateMutexW FindResourceA lstrlenA EnumDateFormatsExW GetProfileIntW _lwrite CompareFileTime SetConsoleScreenBufferSize GetComputerNameW GetTickCount GetConsoleAliasesLengthA GetGeoInfoW WriteFile GlobalAlloc SetFileShortNameW GetLocaleInfoW FatalAppExitW ReadConsoleInputA FreeConsole CreateEventA FindNextVolumeW DisconnectNamedPipe GetConsoleAliasesW SetLastError lstrcmpiA GetProcAddress VirtualAlloc LoadLibraryA _lopen GetWindowsDirectoryW GlobalAddAtomW AddConsoleAliasA CreateFileA SetStdHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetLastError HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc HeapCreate VirtualFree HeapReAlloc HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

LoadMenuW CharLowerBuffA CharUpperBuffA

Sharing