eReceipt[.]pdf[.]exe

General

Target
eReceipt.pdf.exe
Size 515KB
Sample221222-vmd48aaa3w
SHA256 4c10f4d1da51cac1387dd193fb46ff33c5c867a4e20566a9c3a2acce0ac39d77
MD5 4f2009267c61a2d67e6387eb6d35ecbc
SHA1 e1153714cce70c30d47d7e4633ad967685e85f95
SHA512 e94a2769e89f3b095ef173d1031731e67f7e40ba4142d787ac006491c9f7db2cb2c07e957c4f84c3ae71c4ac5e0e2e716df8084197b2360ab51fd5a7eeae8930
SSDEEP 12288:iAKVbQqxMoobFOyb7Q3zQOCiSb1ZlL5/7FTQezI8L6tg0yI:i9NuoAFlbEQ19/7FceztL620
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

eReceipt.pdf.exe

.exe 515KB

eReceipt.pdf.exe

IMPHASH 9f6fc012897ab7eafa86c48d9a206ea0
SHA256 4c10f4d1da51cac1387dd193fb46ff33c5c867a4e20566a9c3a2acce0ac39d77
MD5 4f2009267c61a2d67e6387eb6d35ecbc
SHA1 e1153714cce70c30d47d7e4633ad967685e85f95
SHA512 e94a2769e89f3b095ef173d1031731e67f7e40ba4142d787ac006491c9f7db2cb2c07e957c4f84c3ae71c4ac5e0e2e716df8084197b2360ab51fd5a7eeae8930
SSDEEP 12288:iAKVbQqxMoobFOyb7Q3zQOCiSb1ZlL5/7FTQezI8L6tg0yI:i9NuoAFlbEQ19/7FceztL620
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15892

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW TlsSetValue LoadLibraryW GetCalendarInfoW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode GetConsoleAliasW WriteConsoleW MultiByteToWideChar GetLastError SetLastError GetProcAddress VirtualAlloc CreateConsoleScreenBuffer CreateMemoryResourceNotification GetUserDefaultLCID LoadLibraryA WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize FoldStringW FoldStringA CreateMutexA SetThreadAffinityMask EndUpdateResourceA AddConsoleAliasA GetConsoleProcessList LCMapStringW VirtualAllocEx GetConsoleAliasExesA Sleep ExitProcess GetStartupInfoW HeapAlloc ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException HeapReAlloc SetFilePointer SetStdHandle RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize GetModuleHandleA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP CreateFileA

user32

WindowFromDC

advapi32

RegQueryInfoKeyW

Sharing