b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N.exe
Size

320KB
MD5

e0cf01f8e4d92943522cd69b01dcf100
SHA1

e47238b98f51c0384fea167f3054e63c48cee720
SHA256

b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8
SHA512

ceb3aa49012c565f3657eb78cc94e2e95a5bce72b8ad361a2e7d2cadcd6ad1869bda22db784034219af80ed9e9cd09268f938c1049fd26b34a288b66c3a899ba
SSDEEP

6144:08FOumLCE/jANU0VSaimnpnv9/2Hh5Sao2JUjJUrecECM:08FdmOE/y7QaimlF2UR2JMJUrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N.exe

Files

b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N.exe
.exe windows:5 windows x86 arch:x86

f0e234e2420e60b9bbe2ea061640be35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
EnumCalendarInfoA
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
InterlockedCompareExchange
WriteConsoleInputA
FreeEnvironmentStringsA
GetModuleHandleW
EnumTimeFormatsA
LoadLibraryW
ReadConsoleInputA
FindNextVolumeW
VerifyVersionInfoA
SetComputerNameExW
FindNextVolumeMountPointW
GetShortPathNameA
LCMapStringA
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
VirtualAlloc
CreateJobSet
CopyFileA
GetTempFileNameA
GetAtomNameA
LoadLibraryA
InterlockedExchangeAdd
SetCalendarInfoW
GetCommMask
GlobalUnWire
EnumDateFormatsW
OpenEventW
GetVersionExA
EnumCalendarInfoExA
SetFileAttributesW
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

Sections

.text
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0e234e2420e60b9bbe2ea061640be35

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 280KB - Virtual size: 279KB

.data Size: 25KB - Virtual size: 44KB

.rsrc Size: 14KB - Virtual size: 14KB

.text
Size: 280KB - Virtual size: 279KB

.data
Size: 25KB - Virtual size: 44KB

.rsrc
Size: 14KB - Virtual size: 14KB