Monoxidex86[.]harmless[.]exe

General

Target
Monoxidex86.harmless.exe
Size 131KB
Sample261110-3ja76acd84
SHA256 1ab7375550516d7445c47fd9b551ed864f227401a14ff3f1ff0d70caca3bd997
MD5 bd65d387482def1fe00b50406f731763
SHA1 d06a2ba2e29228f443f97d1dd3a8da5dd7df5903
SHA512 351ecd109c4d49bc822e8ade73a9516c4a531ebcda63546c155e677dcff19708068dc588b2fcf30cad086238e8b206fc5f349d37dda02d3c3a8d9b570d92e4d9
SSDEEP 3072:yC1uNIhRRMavV44UAh1fwNoDiAG7BNS0O6WBHMz/:UehRRtv24UAh8oDvMg0ORBH2/
TLSH
T16BD37C00B0C1C4B2D5B5193118B5FAA64E3DFE740B249EFF77D81A6A4EB41C129B396B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Monoxidex86.harmless.exe

File Explorer

Monoxidex86.harmless.exe

.exe 131KB

Monoxidex86.harmless.exe

IMPHASH be95c75b01e2531df9bc609ed71114ed
SHA256 1ab7375550516d7445c47fd9b551ed864f227401a14ff3f1ff0d70caca3bd997
MD5 bd65d387482def1fe00b50406f731763
SHA1 d06a2ba2e29228f443f97d1dd3a8da5dd7df5903
SHA512 351ecd109c4d49bc822e8ade73a9516c4a531ebcda63546c155e677dcff19708068dc588b2fcf30cad086238e8b206fc5f349d37dda02d3c3a8d9b570d92e4d9
SSDEEP 3072:yC1uNIhRRMavV44UAh1fwNoDiAG7BNS0O6WBHMz/:UehRRtv24UAh8oDvMg0ORBH2/
TLSH
T16BD37C00B0C1C4B2D5B5193118B5FAA64E3DFE740B249EFF77D81A6A4EB41C129B396B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

25106

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

waveOutWrite waveOutUnprepareHeader waveOutReset waveOutOpen waveOutPrepareHeader

kernel32

GetLastError TerminateThread CloseHandle LoadLibraryW CreateThread HeapAlloc GetProcAddress GetProcessHeap FreeLibrary DecodePointer HeapReAlloc HeapSize GetStringTypeW GetFileType SetStdHandle Sleep FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetCurrentThreadId WaitForSingleObject CreateMutexW HeapFree FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead CreateFileW GetStartupInfoW GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RaiseException ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW

user32

GetMessageW GetDC EnumDisplayMonitors GetSystemMetrics DrawIcon DestroyCursor DispatchMessageW SetTimer RedrawWindow TranslateMessage GetCursorInfo

gdi32

BitBlt SelectObject CreateDIBSection CreateCompatibleDC StretchBlt DeleteDC CreatePen Ellipse DeleteObject CreateSolidBrush

Sharing