31a194cac2e9de7a6007ed9ec667f810N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
31a194cac2e9de7a6007ed9ec667f810N.exe
Size 269KB
Sample240712-eyrxfsybqk
SHA256 a0d51145bd3f6620032b432be3cdb9a4bd3a2b889c01d101c9a53d8c46c6b4e4
MD5 31a194cac2e9de7a6007ed9ec667f810
SHA1 4c32b1079830ec850a9fc5772b62f7ec7e3f3eef
SHA512 26f488523aecfb4d26ea71f57a7b8fa155baf4e6d37c81a8f0ad9c810ed83be542effd26fda17e75c191afead0c19c4571614281ddd53e5224d05c447efc2974
SSDEEP 6144:C/l5MBlczZhOHP0DQIpUtJndnUvBJGxhw5UJp8wB:C/EwthXN0ZdUvBJFUN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a194cac2e9de7a6007ed9ec667f810N.exe

File Explorer

31a194cac2e9de7a6007ed9ec667f810N.exe

.exe 269KB

31a194cac2e9de7a6007ed9ec667f810N.exe

IMPHASH a29b75aa02b5d1109f62547b7ede22a2
SHA256 a0d51145bd3f6620032b432be3cdb9a4bd3a2b889c01d101c9a53d8c46c6b4e4
MD5 31a194cac2e9de7a6007ed9ec667f810
SHA1 4c32b1079830ec850a9fc5772b62f7ec7e3f3eef
SHA512 26f488523aecfb4d26ea71f57a7b8fa155baf4e6d37c81a8f0ad9c810ed83be542effd26fda17e75c191afead0c19c4571614281ddd53e5224d05c447efc2974
SSDEEP 6144:C/l5MBlczZhOHP0DQIpUtJndnUvBJGxhw5UJp8wB:C/EwthXN0ZdUvBJFUN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA IsBadStringPtrW CommConfigDialogA SetEndOfFile FindResourceW CreateDirectoryW WriteConsoleInputA GetComputerNameW GetModuleHandleW VirtualFree SetProcessPriorityBoost GlobalFindAtomA LoadLibraryW CreateEventA GetModuleFileNameW CreateFileW GetACP ReplaceFileA GlobalUnlock RemoveVectoredExceptionHandler SetLastError GetProcAddress AttachConsole LocalAlloc EnumResourceTypesW CancelIo GetWindowsDirectoryW OpenFileMappingA SetFileAttributesW HeapReAlloc HeapAlloc HeapSize GetStringTypeW GetLastError GetDateFormatW MultiByteToWideChar LCMapStringW RtlUnwind Sleep HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapCreate SetUnhandledExceptionFilter ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection RaiseException

user32

GetKeyboardLayoutNameA SetMessageExtraInfo GetCaretPos DdeCmpStringHandles CharUpperBuffW GetClassInfoW InsertMenuItemW

advapi32

GetLengthSid

ole32

CoRevokeClassObject CoMarshalHresult

winhttp

WinHttpWriteData