38512d57e3fd2f6aa82b09ff63e42fe1[.]exe

General

Target
38512d57e3fd2f6aa82b09ff63e42fe1.exe
Size 291KB
Sample231126-xbrmaabc3x
SHA256 112f97d7c003ffb148b0c0d7e539c813bfb41ca6838aaa9901348894485eac02
MD5 38512d57e3fd2f6aa82b09ff63e42fe1
SHA1 adb9f23d536f76f073a90470abc44c41f69312d2
SHA512 43ac2a799160473e29306bc113655e5b46582ae93affb1e1e89ff385e0ff62c5eb8f0f28be79b27a1a5d11eb133262383504b329d9babbadcb203560eb6ff3e9
SSDEEP 3072:EtetDmSoEPuCC0eP1fc9x71S9Q2KWm4nJ8kF9hrxYd9U05Qj+Is:eetSBEPuCreNf47YX9nJxxrAa0r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38512d57e3fd2f6aa82b09ff63e42fe1.exe

File Explorer

38512d57e3fd2f6aa82b09ff63e42fe1.exe

.exe 291KB

38512d57e3fd2f6aa82b09ff63e42fe1.exe

IMPHASH 1c1cf4a921a5454d88be29284face39b
SHA256 112f97d7c003ffb148b0c0d7e539c813bfb41ca6838aaa9901348894485eac02
MD5 38512d57e3fd2f6aa82b09ff63e42fe1
SHA1 adb9f23d536f76f073a90470abc44c41f69312d2
SHA512 43ac2a799160473e29306bc113655e5b46582ae93affb1e1e89ff385e0ff62c5eb8f0f28be79b27a1a5d11eb133262383504b329d9babbadcb203560eb6ff3e9
SSDEEP 3072:EtetDmSoEPuCC0eP1fc9x71S9Q2KWm4nJ8kF9hrxYd9U05Qj+Is:eetSBEPuCreNf47YX9nJxxrAa0r
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17929

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue GetConsoleAliasExesLengthA LoadResource GlobalAddAtomA EndUpdateResourceW GetCurrentProcess CreateJobObjectW SignalObjectAndWait GetModuleHandleW GetTickCount GetPrivateProfileStringW GetWindowsDirectoryA TzSpecificLocalTimeToSystemTime GetVolumePathNameW GlobalAlloc LoadLibraryW SetConsoleCursorPosition GetConsoleAliasesW OpenMutexW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc RemoveDirectoryA SetComputerNameA LoadLibraryA InterlockedExchangeAdd CreateFileMappingW AddVectoredExceptionHandler FindFirstVolumeMountPointW SetThreadIdealProcessor FoldStringW GlobalFindAtomW GetModuleHandleA HeapSetInformation GetStringTypeW CompareStringA GetCurrentThreadId SetFileShortNameA CreateFileA GetComputerNameA GetDateFormatW EnumDateFormatsExA DebugActiveProcess Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle FlushFileBuffers HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA

user32

DdeQueryStringW CharUpperW GetMessageExtraInfo

gdi32

CreateCompatibleBitmap GetDeviceGammaRamp

advapi32

SetKernelObjectSecurity

Sharing