31a3410174169926de65f67efd791180N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

31a3410174169926de65f67efd791180N.exe
Size

98KB
MD5

31a3410174169926de65f67efd791180
SHA1

c53cffea98ee7c7447520f9caec0bcf0c316b6d6
SHA256

1e52583679eb5e44c07a76d97f6713ed87c74a760df3ddc902019d2ff7348c89
SHA512

39a0ca405bb1e03ff16c63221b3ca9a809c3658e886e4c2149e74483af4d030c37c7c36c24ae390f7f1fe62f2f511420df9bff843e074f1aea6b589fdbc8aac6
SSDEEP

3072:XzPWprjyGp3SH+eRgEGMVwVpOwJRtF/dLGGRmWZG3ZGp:XypiGp3SeYg8wVpLJRtF/dHmW+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a3410174169926de65f67efd791180N.exe

Files

31a3410174169926de65f67efd791180N.exe
.exe windows:4 windows x86 arch:x86

097988954419628d914421cea98db2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
GetModuleFileNameA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
WerRegisterRuntimeExceptionModule
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetSystemDirectoryW
CloseHandle
GetLocalTime
DeleteCriticalSection
InitializeCriticalSection
ResumeThread
CreateThread
ExitThread
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection

user32

GetKeyboardType
MessageBoxA
CharNextA
MessageBoxA
OemToCharA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.xdata
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.extjmp
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

097988954419628d914421cea98db2cc

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

Sections

.xdata Size: 81KB - Virtual size: 81KB

DATA Size: 512B - Virtual size: 468B

.extjmp Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 4KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 2KB

.l1 Size: 3KB - Virtual size: 3KB

.l1 Size: 3KB - Virtual size: 3KB

.xdata
Size: 81KB - Virtual size: 81KB

DATA
Size: 512B - Virtual size: 468B

.extjmp
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 2KB

.l1
Size: 3KB - Virtual size: 3KB

.l1
Size: 3KB - Virtual size: 3KB