15de9ae1eeada687aa5ac2e9bad394ae

General

Target
15de9ae1eeada687aa5ac2e9bad394ae
Size 214KB
Sample231230-mgm6yahccm
SHA256 8e89af2f025980f2da8a9b1a64e8dae8b4b2adabfd5d05249f33623184861908
MD5 15de9ae1eeada687aa5ac2e9bad394ae
SHA1 dac4099c676593d3ec91b8c53d0c6a1e7dba48ba
SHA512 3894f8aff4a787c6261f88e4e3e03d92f5d557c5364550499c0cd0579ae245b2d5a4cdc674805e645647fb3d1be47ea34aba0cddc59507ab109826dbe19413fd
SSDEEP 3072:QPrrj3XS00qsd5HL1pETv5owmPoqm/WWaArywoOLi6:wj3XStf7HLvGGtg3WzRwoOL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15de9ae1eeada687aa5ac2e9bad394ae

File Explorer

15de9ae1eeada687aa5ac2e9bad394ae

.exe 214KB

15de9ae1eeada687aa5ac2e9bad394ae

IMPHASH 5cf8ab4c07bd680cc3ad63fcf1e8b997
SHA256 8e89af2f025980f2da8a9b1a64e8dae8b4b2adabfd5d05249f33623184861908
MD5 15de9ae1eeada687aa5ac2e9bad394ae
SHA1 dac4099c676593d3ec91b8c53d0c6a1e7dba48ba
SHA512 3894f8aff4a787c6261f88e4e3e03d92f5d557c5364550499c0cd0579ae245b2d5a4cdc674805e645647fb3d1be47ea34aba0cddc59507ab109826dbe19413fd
SSDEEP 3072:QPrrj3XS00qsd5HL1pETv5owmPoqm/WWaArywoOLi6:wj3XStf7HLvGGtg3WzRwoOL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

84486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA VerifyVersionInfoW CreateFileW WritePrivateProfileSectionA GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryW VirtualFree SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI GetConsoleCP LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputA GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameA SetCriticalSectionSpinCount GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle LoadLibraryA GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

15de9ae1eeada687aa5ac2e9bad394ae

kernel32

user32

generic