pax_389[.]bin[.]exe

General

Target
pax_389.bin.exe
Size 223KB
Sample240102-233wvaech8
SHA256 a8a3130c779904e23b50d69b4e73a714b345e296feebb9f64a732d5c73e7973b
MD5 553cc8aee992da42454595e76d7afb37
SHA1 47a5850ad4c2b7e6708fa28300f8fdaf54839ebf
SHA512 68ae6e2805e2a2281de7b8cb934dd82e44bfd75027bc447a622f5dee562f64ae4dc23285c6c1b9f6b2fb2f339e3a24e872a8e1b05e03f8b0f4ecf4632e5fba18
SSDEEP 6144:u4sxL7SMoJcll5+CZNdX9O3LidITCW2HTfKs0qxIT:u4UHSMecXhJg3LiGTCW2HDKrqi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pax_389.bin.exe

File Explorer

pax_389.bin.exe

.exe 223KB

pax_389.bin.exe

IMPHASH b2e3875b9432f537090e379200a83dca
SHA256 a8a3130c779904e23b50d69b4e73a714b345e296feebb9f64a732d5c73e7973b
MD5 553cc8aee992da42454595e76d7afb37
SHA1 47a5850ad4c2b7e6708fa28300f8fdaf54839ebf
SHA512 68ae6e2805e2a2281de7b8cb934dd82e44bfd75027bc447a622f5dee562f64ae4dc23285c6c1b9f6b2fb2f339e3a24e872a8e1b05e03f8b0f4ecf4632e5fba18
SSDEEP 6144:u4sxL7SMoJcll5+CZNdX9O3LidITCW2HTfKs0qxIT:u4UHSMecXhJg3LiGTCW2HDKrqi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

15888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW CreateFileA GlobalDeleteAtom SetThreadContext WriteConsoleInputW SetFilePointer PeekNamedPipe SetConsoleTextAttribute OpenJobObjectA GetLogicalDriveStringsW InterlockedCompareExchange OpenSemaphoreA CreateHardLinkA GetTickCount FormatMessageA FindNextVolumeW GetFileAttributesW FileTimeToSystemTime GetGeoInfoA IsDBCSLeadByte GetModuleFileNameW GlobalUnlock GetShortPathNameA GetLastError BackupRead GetProcAddress VirtualAlloc BeginUpdateResourceW GetTempFileNameA LoadLibraryA FoldStringA FindNextFileA GetThreadPriority FindFirstChangeNotificationA FreeEnvironmentStringsW EnumResourceNamesA FindFirstVolumeA GetConsoleProcessList ReadConsoleOutputCharacterW WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetProcessHeap InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount CloseHandle GetModuleHandleA GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetEndOfFile

user32

GetMessageExtraInfo ChangeMenuA LoadMenuA GetClassInfoExW DdeQueryStringA CharToOemBuffA

Sharing