b514a135e651cce25616a05190998c44

General

Target
b514a135e651cce25616a05190998c44
Size 452KB
Sample240305-ta5wqsae31
SHA256 ad6241f710aaf56d3275da0b06cca0d90989c0626e96bccd98a211d461dec9e9
MD5 b514a135e651cce25616a05190998c44
SHA1 aae9e8ae05738633885e1ac1fb499d490c65c1ec
SHA512 96a3de70b79636c6a2a93f801234771445100324dcea4be9f6da6861bf42e94d3420fec19c60d1208583f531e587f774f81ef008d3b2c6c4bc1277a31cf6be54
SSDEEP 12288:qwrTlklaqC8oZ22Za425zWeLVw4BUyRiY:qwrT4HI22Za4x2Vw4BUJY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b514a135e651cce25616a05190998c44

File Explorer

b514a135e651cce25616a05190998c44

.exe 452KB

b514a135e651cce25616a05190998c44

IMPHASH 38170c4d65ff42b014b27008b95c5de6
SHA256 ad6241f710aaf56d3275da0b06cca0d90989c0626e96bccd98a211d461dec9e9
MD5 b514a135e651cce25616a05190998c44
SHA1 aae9e8ae05738633885e1ac1fb499d490c65c1ec
SHA512 96a3de70b79636c6a2a93f801234771445100324dcea4be9f6da6861bf42e94d3420fec19c60d1208583f531e587f774f81ef008d3b2c6c4bc1277a31cf6be54
SSDEEP 12288:qwrTlklaqC8oZ22Za425zWeLVw4BUyRiY:qwrT4HI22Za4x2Vw4BUJY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10777

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gegaw61\gimeda.pdb

kernel32

GetComputerNameA SetProcessAffinityMask GlobalDeleteAtom WriteConsoleInputW WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW BuildCommDCBAndTimeoutsA UpdateResourceA EndUpdateResourceW GetCurrentProcess GetUserDefaultLCID WaitForSingleObject SetEvent GetSystemDefaultLCID ReadConsoleW SetFileTime WriteFile CreateActCtxW InitializeCriticalSection ActivateActCtx GetConsoleCP GlobalFindAtomA LoadLibraryW TerminateThread ReadConsoleInputA CopyFileW GetSystemWindowsDirectoryA ReadConsoleOutputW GetVersionExW InterlockedPopEntrySList DnsHostnameToComputerNameW GetConsoleAliasW SetConsoleCursorPosition VerifyVersionInfoA CreateFileW CreateActCtxA SetConsoleTitleA GetConsoleOutputCP GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue CreateTapePartition GetProfileStringA GetModuleHandleA BuildCommDCBA VirtualProtect GetFileAttributesExW GetCPInfoExA FindFirstVolumeA GetPrivateProfileSectionW GetSystemTime AreFileApisANSI CreateThread UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

b514a135e651cce25616a05190998c44

kernel32

user32

generic