3169bb8ae4a4c129c9aae5f4d9fa357f[.]exe

General

Target
3169bb8ae4a4c129c9aae5f4d9fa357f.exe
Size 453KB
Sample240321-db6awsab94
SHA256 00fed3aba0f9581ef2b3df7e140a5008e3f62b56b5f6feb4519032067fda0c5f
MD5 3169bb8ae4a4c129c9aae5f4d9fa357f
SHA1 710e981b0b00ea69b8ffaca0569abe202404a938
SHA512 0a86f8f77840e78c5e8a69319d1e374c75d1ce1c15376cafb3db618b30d41720670cf36e4b89b72883604f53412b23c17bb60036fa932ffade325bee1296f8f3
SSDEEP 6144:Lja1W1/GN5fup600kA7CAbxpKJbP7gC3Nr9cn2jPzzGZ2AD1Fh:Ha1W4fupeCAbxobDgC3U2rnGZlDd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3169bb8ae4a4c129c9aae5f4d9fa357f.exe

File Explorer

3169bb8ae4a4c129c9aae5f4d9fa357f.exe

.exe 453KB

3169bb8ae4a4c129c9aae5f4d9fa357f.exe

IMPHASH 6911fddb233fa8e4e7d5798f64fd8e58
SHA256 00fed3aba0f9581ef2b3df7e140a5008e3f62b56b5f6feb4519032067fda0c5f
MD5 3169bb8ae4a4c129c9aae5f4d9fa357f
SHA1 710e981b0b00ea69b8ffaca0569abe202404a938
SHA512 0a86f8f77840e78c5e8a69319d1e374c75d1ce1c15376cafb3db618b30d41720670cf36e4b89b72883604f53412b23c17bb60036fa932ffade325bee1296f8f3
SSDEEP 6144:Lja1W1/GN5fup600kA7CAbxpKJbP7gC3Nr9cn2jPzzGZ2AD1Fh:Ha1W4fupeCAbxobDgC3U2rnGZlDd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14445

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA InterlockedDecrement QueryDosDeviceA GetTickCount FindNextVolumeMountPointA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA GlobalAlloc WideCharToMultiByte GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetSystemPowerStatus GetConsoleAliasExesLengthW GetVersionExW GetConsoleAliasW WriteConsoleW GetEnvironmentVariableA FindResourceA GetLastError GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress LoadLibraryA SetConsoleCtrlHandler GetNumberFormatW RemoveDirectoryW GetModuleFileNameA GetModuleHandleA VirtualProtect PeekConsoleInputA GetCurrentProcessId CloseHandle CreateFileW SetStdHandle OutputDebugStringW LoadLibraryExW ExitThread CreateFileA EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW HeapFree HeapAlloc IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW LCMapStringW GetProcessHeap ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize IsDebuggerPresent GetCurrentThreadId GetFileType ReadFile SetFilePointerEx QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage GetOEMCP HeapReAlloc

user32

CharLowerA GetAltTabInfoA SetUserObjectSecurity GetClassInfoA DrawFrameControl CharUpperBuffW

advapi32

ReadEventLogA

Sharing