39b63b5f1742f083f7facf90f8ecbd7f[.]exe

General

Target
39b63b5f1742f083f7facf90f8ecbd7f.exe
Size 263KB
Sample231024-g68laabb8v
SHA256 a3a3d37f3ca0dc20bb1e4ef9c90925369e9d5713e7ddb797ca2b7c2cea0414c3
MD5 39b63b5f1742f083f7facf90f8ecbd7f
SHA1 edc310e75d37aa254e06e0a271337205d56b2c4d
SHA512 c2322950f5d4f2346d1272381432f94dc18cf95a3b0d15a10d1813503f01b354d353e781bf1986655d42f03c6da78d3c701b02170f74496249b77bef084ac4a4
SSDEEP 3072:GsXnv9ChKi4cWkPELblJL9/w06E+4SmGfMDOeqcJcQ672qRKtuuAEn5m+6+B7:/kQi4wMLTLSHL4SF0D/nJP67TUiTH+B
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39b63b5f1742f083f7facf90f8ecbd7f.exe

File Explorer

39b63b5f1742f083f7facf90f8ecbd7f.exe

.exe 263KB

39b63b5f1742f083f7facf90f8ecbd7f.exe

IMPHASH a068146a0be0aaa89f57a8b52abbacb0
SHA256 a3a3d37f3ca0dc20bb1e4ef9c90925369e9d5713e7ddb797ca2b7c2cea0414c3
MD5 39b63b5f1742f083f7facf90f8ecbd7f
SHA1 edc310e75d37aa254e06e0a271337205d56b2c4d
SHA512 c2322950f5d4f2346d1272381432f94dc18cf95a3b0d15a10d1813503f01b354d353e781bf1986655d42f03c6da78d3c701b02170f74496249b77bef084ac4a4
SSDEEP 3072:GsXnv9ChKi4cWkPELblJL9/w06E+4SmGfMDOeqcJcQ672qRKtuuAEn5m+6+B7:/kQi4wMLTLSHL4SF0D/nJP67TUiTH+B
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

34623

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW PeekNamedPipe SetComputerNameExA AllocConsole GetConsoleAliasExesLengthA DeleteVolumeMountPointA SetConsoleTextAttribute GetCommState FreeEnvironmentStringsA GetTickCount ReadDirectoryChangesW GetConsoleAliasesA GetVolumePathNameW WideCharToMultiByte GetSystemWindowsDirectoryA EnumSystemCodePagesA IsProcessorFeaturePresent GetConsoleAliasW InterlockedExchange FillConsoleOutputCharacterW GetLastError InterlockedFlushSList SetLastError BackupRead GetProcAddress VirtualAlloc SetPriorityClass CreateNamedPipeA RemoveDirectoryA OpenWaitableTimerA LoadLibraryA LocalAlloc GetNumberFormatW RemoveDirectoryW FoldStringW GetOEMCP DebugSetProcessKillOnExit GetModuleHandleA UpdateResourceW FatalExit FreeEnvironmentStringsW VirtualProtect ReadConsoleInputW GetWindowsDirectoryW GlobalAddAtomW AddConsoleAliasA SetFileAttributesW LocalFileTimeToFileTime WriteConsoleW GetConsoleOutputCP FindResourceA CreateFileA PeekConsoleInputW WriteConsoleA CloseHandle HeapFree GetModuleHandleW Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc HeapSize MultiByteToWideChar ReadFile SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers

user32

LoadMenuW CharToOemBuffW ChangeDisplaySettingsA

gdi32

GetCharWidthA GetCharABCWidthsFloatA GetBoundsRect

ole32

StringFromIID

Sharing