e1e76de4328d3b1cbaddd63648b68b89

General

Target
e1e76de4328d3b1cbaddd63648b68b89
Size 12.4MB
Sample240327-rye9wahd2v
SHA256 5dfb6e38638229e915cc61d098ac5604c57e9951cb10427fc9af1cb3048dae46
MD5 e1e76de4328d3b1cbaddd63648b68b89
SHA1 b45d7bfd9d0d21112ad8fd4a987e1a4aab664db8
SHA512 bc3e711f37e0907a234526811f49660f9589076796324b234cee99f6d0b0520b3696e5e1c6a93ebf24a4a6b86422938d1f18373aa9b31f6cab4f4aaec498d741
SSDEEP 393216:qmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmma:qmmmmmmmmmmmmmmmmmmmmmmmmmmmmmma
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1e76de4328d3b1cbaddd63648b68b89

File Explorer

e1e76de4328d3b1cbaddd63648b68b89

.exe 12.4MB

e1e76de4328d3b1cbaddd63648b68b89

IMPHASH 213ce6a72c39868a010970b448621618
SHA256 5dfb6e38638229e915cc61d098ac5604c57e9951cb10427fc9af1cb3048dae46
MD5 e1e76de4328d3b1cbaddd63648b68b89
SHA1 b45d7bfd9d0d21112ad8fd4a987e1a4aab664db8
SHA512 bc3e711f37e0907a234526811f49660f9589076796324b234cee99f6d0b0520b3696e5e1c6a93ebf24a4a6b86422938d1f18373aa9b31f6cab4f4aaec498d741
SSDEEP 393216:qmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmma:qmmmmmmmmmmmmmmmmmmmmmmmmmmmmmma
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

68247

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yor\lixaf.pdb

kernel32

GetConsoleAliasesLengthA GetTapePosition GetLongPathNameA GetUserDefaultLangID AddRefActCtx GetCPInfoExA WriteConsoleInputW ReadConsoleInputW GetTapeParameters WaitCommEvent GetNumaNodeProcessorMask GetConsoleCP VerifyVersionInfoA WaitNamedPipeW CreateMutexA WriteConsoleW GetLastError CreateFileA DeleteFileW WritePrivateProfileSectionA GetPrivateProfileSectionW GetLongPathNameW SetStdHandle LoadLibraryW IsDebuggerPresent FindFirstVolumeW WriteFile BuildCommDCBW FindActCtxSectionStringW VerLanguageNameW SetFileShortNameA WriteProcessMemory GetFileAttributesW OpenEventA SetEvent IsBadReadPtr Sleep WaitForSingleObject LoadResource EnumDateFormatsW FreeConsole SetConsoleCtrlHandler SetConsoleTitleW GetCurrentConsoleFont SetConsoleTextAttribute AttachConsole GetConsoleAliasesLengthW ReadConsoleA ReadConsoleOutputW GetSystemWindowsDirectoryW GetStringTypeW BuildCommDCBAndTimeoutsA HeapUnlock HeapLock GetAtomNameW HeapReAlloc HeapCompact GetGeoInfoW GetCurrentProcess GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetOEMCP WaitForMultipleObjects VerifyVersionInfoW WriteConsoleOutputCharacterA LocalAlloc SetMailslotInfo GetCPInfoExW SetEnvironmentVariableW SetCalendarInfoA CommConfigDialogA GetConsoleWindow FindAtomW SetFileApisToOEM GetStringTypeA HeapSize GetDiskFreeSpaceA GetProfileIntA InterlockedPopEntrySList GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc GetCPInfo GetACP IsValidCodePage RtlUnwind GetLocaleInfoA GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP CloseHandle

gdi32

GetCharWidthFloatA

Sharing

General

Malware Config

Signatures

File Explorer

e1e76de4328d3b1cbaddd63648b68b89

kernel32

gdi32

generic