b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N[.]exe

General

Target
b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N.exe
Size 320KB
Sample241220-b3534awpgj
SHA256 b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8
MD5 e0cf01f8e4d92943522cd69b01dcf100
SHA1 e47238b98f51c0384fea167f3054e63c48cee720
SHA512 ceb3aa49012c565f3657eb78cc94e2e95a5bce72b8ad361a2e7d2cadcd6ad1869bda22db784034219af80ed9e9cd09268f938c1049fd26b34a288b66c3a899ba
SSDEEP 6144:08FOumLCE/jANU0VSaimnpnv9/2Hh5Sao2JUjJUrecECM:08FdmOE/y7QaimlF2UR2JMJUrq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N.exe

File Explorer

b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N.exe

.exe 320KB

b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8N.exe

IMPHASH f0e234e2420e60b9bbe2ea061640be35
SHA256 b31a4fce3073218756ef0c2ebce409288bba3d9dca83a47476cc38316d90a5b8
MD5 e0cf01f8e4d92943522cd69b01dcf100
SHA1 e47238b98f51c0384fea167f3054e63c48cee720
SHA512 ceb3aa49012c565f3657eb78cc94e2e95a5bce72b8ad361a2e7d2cadcd6ad1869bda22db784034219af80ed9e9cd09268f938c1049fd26b34a288b66c3a899ba
SSDEEP 6144:08FOumLCE/jANU0VSaimnpnv9/2Hh5Sao2JUjJUrecECM:08FdmOE/y7QaimlF2UR2JMJUrq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

34199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA EnumCalendarInfoA InterlockedIncrement InterlockedDecrement GetCurrentProcess InterlockedCompareExchange WriteConsoleInputA FreeEnvironmentStringsA GetModuleHandleW EnumTimeFormatsA LoadLibraryW ReadConsoleInputA FindNextVolumeW VerifyVersionInfoA SetComputerNameExW FindNextVolumeMountPointW GetShortPathNameA LCMapStringA GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc CreateJobSet CopyFileA GetTempFileNameA GetAtomNameA LoadLibraryA InterlockedExchangeAdd SetCalendarInfoW GetCommMask GlobalUnWire EnumDateFormatsW OpenEventW GetVersionExA EnumCalendarInfoExA SetFileAttributesW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc HeapCreate VirtualFree HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer CloseHandle ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW GetModuleHandleA WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

Sharing