15babf8e0289bbd390f95b8d03187c35

General

Target
15babf8e0289bbd390f95b8d03187c35
Size 11.1MB
Sample231230-mdl5gagder
SHA256 208e0b6bb172c3f887f68a363b034af17815dd53d0ead4ffeee84b653a4e11bd
MD5 15babf8e0289bbd390f95b8d03187c35
SHA1 4cf4f245677949cef516eb64db0b55da273cf32f
SHA512 9ab9b7c79f21c8b32f926a6d7f1c9d579032669b20440a4a4f4fd44a17598436ef2dc3da73f3809a9fc55cd543e7f629580c4ab9441dbf87ff5ba35b7de4583d
SSDEEP 24576:Xj8tdiKEvdYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYv:7Kg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15babf8e0289bbd390f95b8d03187c35

File Explorer

15babf8e0289bbd390f95b8d03187c35

.exe 11.1MB

15babf8e0289bbd390f95b8d03187c35

IMPHASH f38124646e535204cd12e80d37ffde43
SHA256 208e0b6bb172c3f887f68a363b034af17815dd53d0ead4ffeee84b653a4e11bd
MD5 15babf8e0289bbd390f95b8d03187c35
SHA1 4cf4f245677949cef516eb64db0b55da273cf32f
SHA512 9ab9b7c79f21c8b32f926a6d7f1c9d579032669b20440a4a4f4fd44a17598436ef2dc3da73f3809a9fc55cd543e7f629580c4ab9441dbf87ff5ba35b7de4583d
SSDEEP 24576:Xj8tdiKEvdYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYv:7Kg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW EnumResourceNamesW SetVolumeLabelA SearchPathW FindFirstFileW OpenFile SetLocalTime GetDriveTypeW SetEndOfFile GetNumberOfConsoleInputEvents CallNamedPipeA InterlockedIncrement InterlockedDecrement GetProfileStringW GetProfileSectionA GetComputerNameW CreateDirectoryExA GetModuleHandleW GenerateConsoleCtrlEvent GetConsoleTitleA GetWindowsDirectoryA GetSystemWow64DirectoryA EnumResourceTypesA TlsSetValue FindResourceExA GlobalAlloc AddRefActCtx GetVolumeInformationA Sleep ReadFileScatter GetConsoleWindow GetSystemTimeAdjustment GetVersionExW InterlockedPopEntrySList GlobalFlags VerifyVersionInfoA GetBinaryTypeA TerminateProcess ReadFile CompareStringW lstrlenW SetConsoleTitleA GlobalUnlock LCMapStringA GetConsoleOutputCP CreateDirectoryA InterlockedExchange GetFileSizeEx IsDBCSLeadByteEx GetProcAddress FreeUserPhysicalPages SetComputerNameA CreateMemoryResourceNotification SearchPathA GetPrivateProfileStringA GetAtomNameA Process32FirstW OpenMutexA OpenWaitableTimerW SetCalendarInfoW IsSystemResumeAutomatic SetFileApisToANSI WriteProfileSectionW GetCommMask AddAtomA GetTapeParameters GetSystemInfo GetOEMCP FindNextFileA SetConsoleCursorInfo CreateIoCompletionPort WaitCommEvent FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA CompareStringA ScrollConsoleScreenBufferA CopyFileExA DeleteFileA GetModuleHandleA CreateFileA GetLastError MoveFileA GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsAlloc TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetCPInfo IsValidCodePage DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount LoadLibraryA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle SetStdHandle WriteConsoleA

user32

GetMenuCheckMarkDimensions GetMenuInfo GetComboBoxInfo GetMenuBarInfo

Sharing

General

Malware Config

Signatures

File Explorer

15babf8e0289bbd390f95b8d03187c35

kernel32

user32

generic