c15e7fdb62195068986c10da96d16d82543c88e044fb71408acf125ee1bc4c5b

General

Target
c15e7fdb62195068986c10da96d16d82543c88e044fb71408acf125ee1bc4c5b
Size 251KB
Sample240226-ff1mbadb86
SHA256 c15e7fdb62195068986c10da96d16d82543c88e044fb71408acf125ee1bc4c5b
MD5 178a4791cfb355fd921f36635609837d
SHA1 eb275338638b98fe3c58307ab67cef0b2bfc5feb
SHA512 cc141a768be894609664848c64eba10715898f29824a966a211f7059b51571716b165cc6b8d515d64aeda6dfbb99d84456a78d05bd0f3bfdd76ca77f6969ec1e
SSDEEP 3072:O2T42uAz6i0IeT5ZQlWL4xGP56ygMmkdxA9V/J/HSiXMx5qin:OXBAzbdNo4xGhGN4g1JvSiti
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c15e7fdb62195068986c10da96d16d82543c88e044fb71408acf125ee1bc4c5b

File Explorer

c15e7fdb62195068986c10da96d16d82543c88e044fb71408acf125ee1bc4c5b

.exe 251KB

c15e7fdb62195068986c10da96d16d82543c88e044fb71408acf125ee1bc4c5b

IMPHASH 211268bd833113e94978cba72a198db6
SHA256 c15e7fdb62195068986c10da96d16d82543c88e044fb71408acf125ee1bc4c5b
MD5 178a4791cfb355fd921f36635609837d
SHA1 eb275338638b98fe3c58307ab67cef0b2bfc5feb
SHA512 cc141a768be894609664848c64eba10715898f29824a966a211f7059b51571716b165cc6b8d515d64aeda6dfbb99d84456a78d05bd0f3bfdd76ca77f6969ec1e
SSDEEP 3072:O2T42uAz6i0IeT5ZQlWL4xGP56ygMmkdxA9V/J/HSiXMx5qin:OXBAzbdNo4xGhGN4g1JvSiti
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9276

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\latomuvuvomo.pdb

kernel32

CreateFileA GetLocaleInfoA GetConsoleAliasExesLengthA InterlockedIncrement ReadConsoleA GetConsoleAliasA InterlockedDecrement GetComputerNameW GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent FindNextVolumeMountPointA CreateRemoteThread GetConsoleAliasExesW CreateDirectoryExW GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA GetTimeFormatW GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA SetStdHandle SetComputerNameA GetTempFileNameA LoadLibraryA InterlockedExchangeAdd GetNumberFormatW DeviceIoControl GetConsoleTitleW GetFileAttributesExW GetCurrentProcessId AddConsoleAliasA CloseHandle GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapAlloc HeapFree SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers HeapSize

user32

GetAltTabInfoA LoadKeyboardLayoutA CharUpperBuffA

Sharing

General

Malware Config

Signatures

File Explorer

c15e7fdb62195068986c10da96d16d82543c88e044fb71408acf125ee1bc4c5b

kernel32

user32

generic