c31f2ccc98608bd860e73cf972dc91062d6c997651f10ba7ff75b51a9a6b70b9

General

Target
c31f2ccc98608bd860e73cf972dc91062d6c997651f10ba7ff75b51a9a6b70b9
Size 385KB
Sample240606-pr8xhaeb7v
SHA256 c31f2ccc98608bd860e73cf972dc91062d6c997651f10ba7ff75b51a9a6b70b9
MD5 230323136b7038d61a85b16548af5352
SHA1 91de791ebfd935282bf3a48ac0bd4e47d059a668
SHA512 cba2d35ddf86cdc4601b784183ee5021330d804d129ee739f48369f36efaa5815e9a737a1ecee126eadd3a5928a13390c88bc66b4f4aa66a21f77b952961a3a3
SSDEEP 6144:/LlBiM8TCaBdGEr07E69u1KheXi88b5KsZhxdTgY4gYco:/nibTXdLiEGUGFdTgw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c31f2ccc98608bd860e73cf972dc91062d6c997651f10ba7ff75b51a9a6b70b9

File Explorer

c31f2ccc98608bd860e73cf972dc91062d6c997651f10ba7ff75b51a9a6b70b9

.exe 385KB

c31f2ccc98608bd860e73cf972dc91062d6c997651f10ba7ff75b51a9a6b70b9

IMPHASH ffe89a49cc0b7b74222ae5cc8ba5ea5a
SHA256 c31f2ccc98608bd860e73cf972dc91062d6c997651f10ba7ff75b51a9a6b70b9
MD5 230323136b7038d61a85b16548af5352
SHA1 91de791ebfd935282bf3a48ac0bd4e47d059a668
SHA512 cba2d35ddf86cdc4601b784183ee5021330d804d129ee739f48369f36efaa5815e9a737a1ecee126eadd3a5928a13390c88bc66b4f4aa66a21f77b952961a3a3
SSDEEP 6144:/LlBiM8TCaBdGEr07E69u1KheXi88b5KsZhxdTgY4gYco:/nibTXdLiEGUGFdTgw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7113

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputW InterlockedIncrement EnumCalendarInfoW GetTimeFormatA GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetSystemTimes SetVolumeMountPointA FormatMessageW GetStringTypeExW FindNextVolumeW GetConsoleAliasW SetTimeZoneInformation SetConsoleTitleA GetConsoleAliasesW GetStringTypeA GetThreadLocale GetProcAddress BuildCommDCBW LoadLibraryA LocalAlloc SetConsoleOutputCP GetModuleFileNameA GetProcessAffinityMask FreeEnvironmentStringsW EnumDateFormatsW CompareStringA DeleteCriticalSection DeleteAtom OpenFileMappingA LocalFileTimeToFileTime SetLastError GetComputerNameA MultiByteToWideChar GetLastError HeapReAlloc HeapAlloc Sleep ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId EnterCriticalSection LeaveCriticalSection HeapFree HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA RtlUnwind HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile CreateFileA CloseHandle GetModuleHandleA

advapi32

RevertToSelf

winhttp

WinHttpAddRequestHeaders

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

198KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

610KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gox

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

98KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c31f2ccc98608bd860e73cf972dc91062d6c997651f10ba7ff75b51a9a6b70b9

kernel32

advapi32

winhttp

generic