31428687c916bfa8d7e0fac111b6d12b[.]exe

General

Target
31428687c916bfa8d7e0fac111b6d12b.exe
Size 177KB
Sample240220-vs4xtsca9v
SHA256 ba2f65ee1823d86f6112d40fc4853ecd534e757ac479f76a57558ca66b4765af
MD5 31428687c916bfa8d7e0fac111b6d12b
SHA1 b20ba454506454f810695223b3997ff7be75a48c
SHA512 5c49f829bcddeb5551c509b84e762df357864afdc57a5a355dd8f751c4541dd7ea6608cc6cd5a80937aa3f65e8c7f7aa2c763ca4682a94577dc0bde53dd2962d
SSDEEP 3072:UWVMq2eBKw70g6551pSCKuiddQIdYrmn0qL9TdEivrl0nfKq:zz/BNgR51pdsQ9r60gT6Crmf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31428687c916bfa8d7e0fac111b6d12b.exe

File Explorer

31428687c916bfa8d7e0fac111b6d12b.exe

.exe 177KB

31428687c916bfa8d7e0fac111b6d12b.exe

IMPHASH 46d713fda4d44cea5cdf4e9e6de07d3f
SHA256 ba2f65ee1823d86f6112d40fc4853ecd534e757ac479f76a57558ca66b4765af
MD5 31428687c916bfa8d7e0fac111b6d12b
SHA1 b20ba454506454f810695223b3997ff7be75a48c
SHA512 5c49f829bcddeb5551c509b84e762df357864afdc57a5a355dd8f751c4541dd7ea6608cc6cd5a80937aa3f65e8c7f7aa2c763ca4682a94577dc0bde53dd2962d
SSDEEP 3072:UWVMq2eBKw70g6551pSCKuiddQIdYrmn0qL9TdEivrl0nfKq:zz/BNgR51pdsQ9r60gT6Crmf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5551

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA HeapAlloc GetSystemDefaultLCID GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GetProcessTimes GetVolumeInformationA LoadLibraryW GetLocaleInfoW ReplaceFileW FlushFileBuffers CreateDirectoryA GetConsoleAliasesW ChangeTimerQueueTimer SetLastError GetProcAddress LocalUnlock SetStdHandle ResetEvent LoadLibraryA LocalAlloc SetConsoleOutputCP AddAtomA DebugSetProcessKillOnExit lstrcatW EraseTape VirtualProtect GetCurrentDirectoryA EnumDateFormatsW FatalAppExitA FileTimeToLocalFileTime WriteConsoleW CloseHandle CreateNamedPipeA GetComputerNameA SetFilePointer GetConsoleMode EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate Sleep HeapSize EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc RtlUnwind HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW GetConsoleCP CreateFileW

user32

GetClassLongA

advapi32

OpenProcessToken

ole32

CreateDataAdviseHolder

Sharing