331bffe2f372fb71367f9cd6312ed2df[.]exe

General

Target
331bffe2f372fb71367f9cd6312ed2df.exe
Size 229KB
Sample240116-jj8zmsgfa8
SHA256 aa339bd1440cf0f7a5faae531ab035233cf357baa7295af69239a9f2bb572996
MD5 331bffe2f372fb71367f9cd6312ed2df
SHA1 fdc7f3ed1c1cdace4ed464b4e9fa16a4b95b8a5f
SHA512 f690c14e72032206a8ab76cc4dc04655658907ba992dd165e0cb1a69ae6e32f392c07e1e18c2756d9f8768cb5217e536fa2a7e44a347919d5d9f6e59b177c00d
SSDEEP 3072:4nqLS1HySqzJLBdUSJiA/1KvZYNbHR97xN25TbjqHMeIlVRGKXRTqTiZ/9rkWglm:4nwFB9bHm5WseN8quZlrk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
331bffe2f372fb71367f9cd6312ed2df.exe

File Explorer

331bffe2f372fb71367f9cd6312ed2df.exe

.exe 229KB

331bffe2f372fb71367f9cd6312ed2df.exe

IMPHASH 4810d21d2e41f7ea32b1ed09331148af
SHA256 aa339bd1440cf0f7a5faae531ab035233cf357baa7295af69239a9f2bb572996
MD5 331bffe2f372fb71367f9cd6312ed2df
SHA1 fdc7f3ed1c1cdace4ed464b4e9fa16a4b95b8a5f
SHA512 f690c14e72032206a8ab76cc4dc04655658907ba992dd165e0cb1a69ae6e32f392c07e1e18c2756d9f8768cb5217e536fa2a7e44a347919d5d9f6e59b177c00d
SSDEEP 3072:4nqLS1HySqzJLBdUSJiA/1KvZYNbHR97xN25TbjqHMeIlVRGKXRTqTiZ/9rkWglm:4nwFB9bHm5WseN8quZlrk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10539

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeEnvironmentStringsA GetTickCount VirtualFree LoadLibraryW GetAtomNameW GetModuleFileNameW CompareStringW IsBadStringPtrA SetConsoleTitleA GetConsoleOutputCP GetConsoleAliasesW InterlockedExchange GetLastError GetProcAddress GetTimeFormatA HeapSize OpenWaitableTimerA LoadLibraryA LocalAlloc WritePrivateProfileStringA lstrcatW FreeEnvironmentStringsW SetCalendarInfoA LocalFree SetFileAttributesW CompareStringA GetTimeZoneInformation GetLocaleInfoW LCMapStringW GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA GetLocaleInfoA TlsGetValue GetTapeStatus GetEnvironmentVariableW HeapFree GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate HeapDestroy DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage SetConsoleCtrlHandler FreeLibrary GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA SetEnvironmentVariableA

user32

GetForegroundWindow GetKeyboardType GetMonitorInfoA

gdi32

GetBoundsRect

advapi32

EnumDependentServicesW OpenEventLogW AccessCheckByTypeResultList

Sharing