a3592693bf98d11182e83ed40779c3a1[.]exe

General

Target
a3592693bf98d11182e83ed40779c3a1.exe
Size 14.0MB
Sample240107-x18l4accdr
SHA256 916264a72ba7e6ab72941fadd14604649ac8afe6865c755ae32528cd8e20f9a4
MD5 a3592693bf98d11182e83ed40779c3a1
SHA1 c19e3a35d2b90f2099f34caffdaab6e14d4488d4
SHA512 e557ed6c28577ab66c830e9a02ba4edc238a7e555f0fac47b7a3afad98523ade9acda9325d6959ad5bb9bba794c2354db9dfc1131d7136f87deb733f2d0baf75
SSDEEP 49152:oaafPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP:o
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3592693bf98d11182e83ed40779c3a1.exe

File Explorer

a3592693bf98d11182e83ed40779c3a1.exe

.exe 14.0MB

a3592693bf98d11182e83ed40779c3a1.exe

IMPHASH 58959b365b24aa3c98eb39fa519e2c9e
SHA256 916264a72ba7e6ab72941fadd14604649ac8afe6865c755ae32528cd8e20f9a4
MD5 a3592693bf98d11182e83ed40779c3a1
SHA1 c19e3a35d2b90f2099f34caffdaab6e14d4488d4
SHA512 e557ed6c28577ab66c830e9a02ba4edc238a7e555f0fac47b7a3afad98523ade9acda9325d6959ad5bb9bba794c2354db9dfc1131d7136f87deb733f2d0baf75
SSDEEP 49152:oaafPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP:o
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetVolumeLabelA CreateFileA GetFileSize GlobalDeleteAtom lstrlenA TlsGetValue GetStringTypeA SetLocalTime GetDriveTypeW GetNumberOfConsoleInputEvents MapUserPhysicalPages CallNamedPipeA InterlockedIncrement InterlockedDecrement CreateDirectoryW WaitForSingleObject WriteConsoleInputA SignalObjectAndWait SetVolumeMountPointW FreeEnvironmentStringsA GetModuleHandleW GetPrivateProfileStringW GetConsoleTitleA GetWindowsDirectoryA SetCommState WriteFileGather CreateDirectoryExW FindResourceExA AddRefActCtx GetPrivateProfileStructW SetSystemTimeAdjustment GlobalFlags GetComputerNameExA Beep SetMessageWaitingIndicator VerifyVersionInfoA GetBinaryTypeA WritePrivateProfileSectionW GetAtomNameW ReadFile CompareStringW GetACP LCMapStringA HeapReAlloc InterlockedExchange SetCurrentDirectoryA IsDBCSLeadByteEx GetProcAddress SetStdHandle SetComputerNameA CreateMemoryResourceNotification GetPrivateProfileStringA SetFileApisToOEM OpenWaitableTimerA Process32FirstW OpenMutexA LocalAlloc SetCalendarInfoW SetConsoleOutputCP AddAtomW QueryDosDeviceW WriteProfileSectionW GetCommMask SetCommMask EnumResourceTypesW GetThreadPriority SetConsoleTitleW FindNextFileW RequestWakeupLatency BuildCommDCBA GetCurrentDirectoryA GetConsoleCursorInfo ScrollConsoleScreenBufferA OpenSemaphoreW GetVersionExA GetCurrentProcessId FindActCtxSectionStringW ReadConsoleOutputCharacterW InterlockedPushEntrySList GetProfileSectionW GetVolumeInformationW IsProcessorFeaturePresent FlushFileBuffers CloseHandle CreateFileW HeapFree VerifyVersionInfoW FileTimeToDosDateTime GetLastError MoveFileA MultiByteToWideChar GetCommandLineW HeapSetInformation GetStartupInfoW LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle DeleteCriticalSection HeapValidate IsBadReadPtr HeapCreate WriteConsoleW SetFilePointer RtlUnwind OutputDebugStringA OutputDebugStringW LoadLibraryW GetStringTypeW LCMapStringW HeapAlloc GetModuleFileNameA HeapSize HeapQueryInformation RaiseException

user32

GetCursorInfo GetMenuInfo GetComboBoxInfo GetMenuBarInfo

advapi32

InitiateSystemShutdownW

Sharing