39351fae1fa6e6227941ebc2b7a7fc75[.]exe

General

Target
39351fae1fa6e6227941ebc2b7a7fc75.exe
Size 311KB
Sample240428-eynj2afh98
SHA256 a2fd8a297495243eb602d0cc696445e264ae83b2896f35e1b7cf2232337fd6a9
MD5 39351fae1fa6e6227941ebc2b7a7fc75
SHA1 352bd5b4f4373546dfe9576dbd02b158589dbd0a
SHA512 04c17b9e4417a9cc61df2841efbedbb4c9ba9f3c0e165e1d3c75643bb265135a41c83c19278da0d11fa0547af29e1da1162d0904f2cb2cf89a18f7354a6640dc
SSDEEP 3072:R1GwGnDTpebsP2X/Z+UzcZsV7ztLksKuPDthTDuDN2gwnMwWF9YX2kkZ7ODE:Qw4c2s9zasKYaR2gSM1KGJODE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39351fae1fa6e6227941ebc2b7a7fc75.exe

File Explorer

39351fae1fa6e6227941ebc2b7a7fc75.exe

.exe 311KB

39351fae1fa6e6227941ebc2b7a7fc75.exe

IMPHASH 8c8bbaaa682c013cc75d9e0c38f1112a
SHA256 a2fd8a297495243eb602d0cc696445e264ae83b2896f35e1b7cf2232337fd6a9
MD5 39351fae1fa6e6227941ebc2b7a7fc75
SHA1 352bd5b4f4373546dfe9576dbd02b158589dbd0a
SHA512 04c17b9e4417a9cc61df2841efbedbb4c9ba9f3c0e165e1d3c75643bb265135a41c83c19278da0d11fa0547af29e1da1162d0904f2cb2cf89a18f7354a6640dc
SSDEEP 3072:R1GwGnDTpebsP2X/Z+UzcZsV7ztLksKuPDthTDuDN2gwnMwWF9YX2kkZ7ODE:Qw4c2s9zasKYaR2gSM1KGJODE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vorux83\mogamalu37\wah-ceze.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing