b31b1bb8dd7498aba3ccda3d81b96738[.]exe

General

Target
b31b1bb8dd7498aba3ccda3d81b96738.exe
Size 293KB
Sample231218-pl6vysadep
SHA256 113ca0c9919a99bd03a9d2399ba7ebd97c446117c2afde072e4a05c20df25e46
MD5 b31b1bb8dd7498aba3ccda3d81b96738
SHA1 b8dad1301dead8460173c5549fecfd692a2b1fe3
SHA512 9321f75e97cd4224f5285e402e3d4df1ee17e1028671adfc74b2202308ac0e2f6e8924c24c6db73f50f5e568baaba6c1b7504dbf793d6f59310ed819f2693717
SSDEEP 3072:PxepLO2nrGdZM2cp5j6Z/RFlyJSAX5d5Kzkdu8HVkO7:PxepL9rGdq2crUXlyRk+u8HV/7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b31b1bb8dd7498aba3ccda3d81b96738.exe

File Explorer

b31b1bb8dd7498aba3ccda3d81b96738.exe

.exe 293KB

b31b1bb8dd7498aba3ccda3d81b96738.exe

IMPHASH e0dc07002fbf5e2ad2a1116b5c525f81
SHA256 113ca0c9919a99bd03a9d2399ba7ebd97c446117c2afde072e4a05c20df25e46
MD5 b31b1bb8dd7498aba3ccda3d81b96738
SHA1 b8dad1301dead8460173c5549fecfd692a2b1fe3
SHA512 9321f75e97cd4224f5285e402e3d4df1ee17e1028671adfc74b2202308ac0e2f6e8924c24c6db73f50f5e568baaba6c1b7504dbf793d6f59310ed819f2693717
SSDEEP 3072:PxepLO2nrGdZM2cp5j6Z/RFlyJSAX5d5Kzkdu8HVkO7:PxepL9rGdq2crUXlyRk+u8HV/7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13164

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FindFirstChangeNotificationW EnumCalendarInfoA GetConsoleAliasesLengthW EndUpdateResourceW InterlockedIncrement GetCurrentProcess SetComputerNameW GetComputerNameW OpenSemaphoreA BackupSeek GetModuleHandleW GetProcessHeap LoadLibraryW SizeofResource GetSystemWindowsDirectoryA Beep GetVolumePathNameA LCMapStringA InterlockedExchange OpenMutexW GetLastError SetLastError GetFullPathNameA VirtualAlloc BeginUpdateResourceW LoadLibraryA CreateFileMappingA LocalAlloc FindFirstVolumeMountPointW FindAtomA GlobalFindAtomW CreateIoCompletionPort RequestDeviceWakeup VirtualProtect SetCalendarInfoA GetVersionExA TerminateJobObject EnumResourceLanguagesW GlobalAddAtomW OpenFileMappingA TlsFree GetProcAddress GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TerminateProcess IsDebuggerPresent HeapAlloc HeapFree HeapSize DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc GetModuleHandleA

user32

IsWindowEnabled

gdi32

GetDeviceGammaRamp

Sharing