38f15aaf745fb328eeeefd9eeb7fb715

General

Target
38f15aaf745fb328eeeefd9eeb7fb715
Size 10.1MB
Sample231231-raq2gabgb9
SHA256 240967f196a84b28e897545973dd24e2f2f1b6b0e5793b2f296005d89d91f87a
MD5 38f15aaf745fb328eeeefd9eeb7fb715
SHA1 15ad9fd116c2fa305f3fd917901f536fae85bf5f
SHA512 d6e3269978f85a478875b7d33d16524a06ce959f1db77145e121dc2fa7d916d68f98dbdcba7c08705672b94e551dee2c4925f51569595b6afeb8a75a1dc9364d
SSDEEP 24576:YerU5sWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbH:YsW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38f15aaf745fb328eeeefd9eeb7fb715

File Explorer

38f15aaf745fb328eeeefd9eeb7fb715

.exe 10.1MB

38f15aaf745fb328eeeefd9eeb7fb715

IMPHASH 800102d28cf35c665bee356e0e434ad6
SHA256 240967f196a84b28e897545973dd24e2f2f1b6b0e5793b2f296005d89d91f87a
MD5 38f15aaf745fb328eeeefd9eeb7fb715
SHA1 15ad9fd116c2fa305f3fd917901f536fae85bf5f
SHA512 d6e3269978f85a478875b7d33d16524a06ce959f1db77145e121dc2fa7d916d68f98dbdcba7c08705672b94e551dee2c4925f51569595b6afeb8a75a1dc9364d
SSDEEP 24576:YerU5sWbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbH:YsW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeNameForVolumeMountPointA GetComputerNameA GetFileSize SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx GlobalLock GetProfileSectionA SetComputerNameW GetFileAttributesExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig LocalFlags GetConsoleAliasesLengthA GetWindowsDirectoryA SetCommState TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemWindowsDirectoryA GetSystemTimeAdjustment InitAtomTable GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW SetConsoleTitleA VirtualUnlock LCMapStringA SetCurrentDirectoryA GetStartupInfoA GetStdHandle GetCPInfoExW GetCurrentDirectoryW VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA GetLocalTime LoadLibraryA CreateSemaphoreW SetConsoleCtrlHandler WriteProfileSectionW Process32NextW CreateIoCompletionPort EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect _lopen FindAtomW GetVersion DeleteFileW UnregisterWaitEx ReadConsoleOutputCharacterW AreFileApisANSI CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

38f15aaf745fb328eeeefd9eeb7fb715

kernel32

user32

generic