e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f

General

Target
e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f
Size 338KB
Sample230815-gtms2sha78
SHA256 e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f
MD5 d637248c2a60ab76b9100534c2d3c1ff
SHA1 54b15fcc5ea9b50c7a26e74aa6a7bd8b75cefba4
SHA512 bfb51a5f05beb0d0f0e1b7606a05f5d5c25aabd5984efd03aac108194edb75b620dfe1f25e54e2b70b941cb2e2aa28dc2397256796f97ae27d72e6ef20ab5cce
SSDEEP 6144:2GvtXLe2pK+6lTgqxI1/sHymR1b28+hmndP:289q20+KT74eN1bj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f

File Explorer

e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f

.exe 338KB

e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f

IMPHASH 88e4c0c322ca61493ae3e61b9186b206
SHA256 e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f
MD5 d637248c2a60ab76b9100534c2d3c1ff
SHA1 54b15fcc5ea9b50c7a26e74aa6a7bd8b75cefba4
SHA512 bfb51a5f05beb0d0f0e1b7606a05f5d5c25aabd5984efd03aac108194edb75b620dfe1f25e54e2b70b941cb2e2aa28dc2397256796f97ae27d72e6ef20ab5cce
SSDEEP 6144:2GvtXLe2pK+6lTgqxI1/sHymR1b28+hmndP:289q20+KT74eN1bj
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27732

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA SearchPathW GetConsoleAliasesLengthW InterlockedDecrement InterlockedCompareExchange WriteConsoleInputA GetTickCount GetCommConfig GetCurrentThread FormatMessageW TransactNamedPipe GetNamedPipeInfo GetModuleFileNameW CreateActCtxA GetACP DisconnectNamedPipe GetConsoleAliasesW GetProfileIntA GetLastError GetProcAddress VirtualAlloc LoadLibraryA DeleteTimerQueue SetFileApisToANSI FindNextChangeNotification Module32FirstW FoldStringW FindNextFileA WriteProfileStringA GetModuleHandleA HeapSetInformation UpdateResourceW ReadConsoleInputW TlsAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapFree WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId SetFilePointer FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapReAlloc WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetStdHandle GetCPInfo GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA CreateFileA CloseHandle LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

CharUpperBuffW LoadMenuA CharLowerBuffW CreateAcceleratorTableA CharToOemBuffA

Sharing

General

Malware Config

Signatures

File Explorer

e04fa0e503137dfc2219c5c2e0f8644ab236a002d665ca3fb297428548d4580f

kernel32

user32