e14442163aa07516e4a8b242d64df1a8

General

Target
e14442163aa07516e4a8b242d64df1a8
Size 493KB
Sample240327-krvbwsgg35
SHA256 d2ceb877de1be0f55c3a9cdb218ff978066f87ae0caf4ee6bd6401c0272c3b78
MD5 e14442163aa07516e4a8b242d64df1a8
SHA1 39a1df5ebe114db8873501eafd06ba5524ff5d7b
SHA512 1c9055b3f69a259d6fda2d5d558f16778d4fa49e27a58fb6daca40dc31cf3b348c1fa4faa550077a0e8ab0cf6df3faa53946022c25e54e51aff051852fb2ae73
SSDEEP 12288:4cxYOWcLoiuQO0PA3vTWK+PWOVy1szok:dYtcQHhvTWP/VNz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e14442163aa07516e4a8b242d64df1a8

File Explorer

e14442163aa07516e4a8b242d64df1a8

.exe 493KB

e14442163aa07516e4a8b242d64df1a8

IMPHASH 5c93c97e908d457a11b98f665a319008
SHA256 d2ceb877de1be0f55c3a9cdb218ff978066f87ae0caf4ee6bd6401c0272c3b78
MD5 e14442163aa07516e4a8b242d64df1a8
SHA1 39a1df5ebe114db8873501eafd06ba5524ff5d7b
SHA512 1c9055b3f69a259d6fda2d5d558f16778d4fa49e27a58fb6daca40dc31cf3b348c1fa4faa550077a0e8ab0cf6df3faa53946022c25e54e51aff051852fb2ae73
SSDEEP 12288:4cxYOWcLoiuQO0PA3vTWK+PWOVy1szok:dYtcQHhvTWP/VNz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fuxacek\kajojavoruw12_pogatixena\fowi\rosesenekoj\n.pdb

kernel32

GetCommandLineW GetNativeSystemInfo lstrlenA TlsGetValue GetStringTypeA InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetPrivateProfileStringW WriteFile SetCommState GlobalAlloc LoadLibraryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetExitCodeProcess IsDBCSLeadByte ReadFile GetStartupInfoW GlobalUnlock GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA LoadLibraryA CreateSemaphoreW GetFileType SetCurrentDirectoryW HeapWalk FindAtomA Process32NextW FreeEnvironmentStringsW EnumResourceNamesA GetCurrentThreadId GetCPInfoExA SetThreadAffinityMask FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP SetFilePointer LCMapStringW GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

e14442163aa07516e4a8b242d64df1a8

kernel32

generic