19879f6acf693b56910c07faffd375c0[.]exe

General

Target
19879f6acf693b56910c07faffd375c0.exe
Size 287KB
Sample240214-n31vlaaf79
SHA256 89e1cd7b16ad87f6ef1cb0693ec15c807ce42ad600dae87c1ecb491225035ba7
MD5 19879f6acf693b56910c07faffd375c0
SHA1 6e681bf6f5497836b32c70d5c98276880262cee1
SHA512 1424bb3a0276478b69fb1cde3cb67819312fa4da0d2ddd409a7a5594f14596af3378dfa4173d9a4e33feb3acc39bbb4ed145dca14a007e495fde31f9c1249146
SSDEEP 3072:0ziRfFi3WzI2OGwtySjMwOrDNKDcB+XlJ56Lw1xmUxaIa2Vd:JRfFDaOkc81J5oUxaIh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19879f6acf693b56910c07faffd375c0.exe

File Explorer

19879f6acf693b56910c07faffd375c0.exe

.exe 287KB

19879f6acf693b56910c07faffd375c0.exe

IMPHASH 7a16202dd7202181174ee4ca5dc3433f
SHA256 89e1cd7b16ad87f6ef1cb0693ec15c807ce42ad600dae87c1ecb491225035ba7
MD5 19879f6acf693b56910c07faffd375c0
SHA1 6e681bf6f5497836b32c70d5c98276880262cee1
SHA512 1424bb3a0276478b69fb1cde3cb67819312fa4da0d2ddd409a7a5594f14596af3378dfa4173d9a4e33feb3acc39bbb4ed145dca14a007e495fde31f9c1249146
SSDEEP 3072:0ziRfFi3WzI2OGwtySjMwOrDNKDcB+XlJ56Lw1xmUxaIa2Vd:JRfFDaOkc81J5oUxaIh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime SystemTimeToFileTime CreateDirectoryW GetComputerNameW SetEvent FreeEnvironmentStringsA GetTickCount GetConsoleAliasesA LoadLibraryW WriteConsoleOutputA HeapDestroy GetTimeZoneInformation ReplaceFileA FlushFileBuffers SetCurrentDirectoryA GetLastError GetCurrentDirectoryW GetProcAddress CreateNamedPipeA LoadLibraryA LocalAlloc AddAtomW SetProcessWorkingSetSize OpenJobObjectW GetModuleHandleA FreeEnvironmentStringsW VirtualProtect EnumDateFormatsW CompareStringA FatalAppExitA IsValidLocale EnumSystemLocalesA HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW HeapCreate EncodePointer EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize HeapReAlloc GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent CloseHandle WriteConsoleW SetStdHandle CreateFileW GetUserDefaultLCID GetLocaleInfoA RaiseException

user32

GetClassLongA

Name

.text

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

39.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gapisa

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.woxitot

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bedipud

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

104KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

19879f6acf693b56910c07faffd375c0.exe

kernel32

user32

generic