e0b47c716f0d29997212ccb7c30686a3

General

Target
e0b47c716f0d29997212ccb7c30686a3
Size 1.0MB
Sample240327-egbtxafb2y
SHA256 e83e6702c3b59f275981161db3eabdb589051a4d36ad2d74c34a8fc45cb31a30
MD5 e0b47c716f0d29997212ccb7c30686a3
SHA1 769ec389ea80ee13b114ce974fbf82174f56de2b
SHA512 782d09295ddd80a21f153f089e0d375be1486ac9ad2c0ab630f6de643fbdf1f50a0b5bc50fc1b839762e743396504dfe3baa3c4567a36b79bc9bf3e82ecb07cf
SSDEEP 24576:9aczVGmnkdcEYRtSerBh1C+ZitNwS347:tGfIRTrBhkFNw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0b47c716f0d29997212ccb7c30686a3

File Explorer

e0b47c716f0d29997212ccb7c30686a3

.exe 1.0MB

e0b47c716f0d29997212ccb7c30686a3

IMPHASH a586726457ac57f34744d575b3ca63a9
SHA256 e83e6702c3b59f275981161db3eabdb589051a4d36ad2d74c34a8fc45cb31a30
MD5 e0b47c716f0d29997212ccb7c30686a3
SHA1 769ec389ea80ee13b114ce974fbf82174f56de2b
SHA512 782d09295ddd80a21f153f089e0d375be1486ac9ad2c0ab630f6de643fbdf1f50a0b5bc50fc1b839762e743396504dfe3baa3c4567a36b79bc9bf3e82ecb07cf
SSDEEP 24576:9aczVGmnkdcEYRtSerBh1C+ZitNwS347:tGfIRTrBhkFNw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

970438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tewihul\xewinomigun-gez\cayo_46 sidesu\zazat.pdb

kernel32

LeaveCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InitializeSListHead SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeW ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameW ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA CommConfigDialogA GetFileAttributesW IsWow64Process UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer HeapCreate VirtualFree VirtualAlloc ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

e0b47c716f0d29997212ccb7c30686a3

kernel32

user32

generic