e2181c2596042502e2da7a84f66d2bfad210c3a3c1ab9b410ad6129e58877b2b

General

Target
e2181c2596042502e2da7a84f66d2bfad210c3a3c1ab9b410ad6129e58877b2b
Size 414KB
Sample240502-lrpxvagd55
SHA256 e2181c2596042502e2da7a84f66d2bfad210c3a3c1ab9b410ad6129e58877b2b
MD5 dc45435ea9b86ace5466a42ebd4acc74
SHA1 b9facc399ae2386b711792b35db0a94e5a357e04
SHA512 8c0e41bb76ac47c916533f4940d64e7424f0394415fbdc494702371bb274ca8204d1a575074f679e15b22588f6f586f530035b100edc06273a9bbf38af786a68
SSDEEP 6144:9mmZ6i9+oC4/6vGrBrWsoZVvFiSUsLHDhH2NDJjwzZ8K:9TZ6i9TUqhWso3v8SUWEG8K
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2181c2596042502e2da7a84f66d2bfad210c3a3c1ab9b410ad6129e58877b2b

File Explorer

e2181c2596042502e2da7a84f66d2bfad210c3a3c1ab9b410ad6129e58877b2b

.exe 414KB

e2181c2596042502e2da7a84f66d2bfad210c3a3c1ab9b410ad6129e58877b2b

IMPHASH e192e24990773dcb955dc12831abae87
SHA256 e2181c2596042502e2da7a84f66d2bfad210c3a3c1ab9b410ad6129e58877b2b
MD5 dc45435ea9b86ace5466a42ebd4acc74
SHA1 b9facc399ae2386b711792b35db0a94e5a357e04
SHA512 8c0e41bb76ac47c916533f4940d64e7424f0394415fbdc494702371bb274ca8204d1a575074f679e15b22588f6f586f530035b100edc06273a9bbf38af786a68
SSDEEP 6144:9mmZ6i9+oC4/6vGrBrWsoZVvFiSUsLHDhH2NDJjwzZ8K:9TZ6i9TUqhWso3v8SUWEG8K
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16244

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\buzadug52\butahesozihewa.pdb

kernel32

CommConfigDialogA LoadLibraryExW InterlockedIncrement InterlockedDecrement BackupSeek GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW TerminateThread GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetFullPathNameA GetConsoleOutputCP GetLastError SetLastError GetProcAddress LoadLibraryA CreateHardLinkW CreateEventW AddAtomA GlobalFindAtomW GlobalUnWire BuildCommDCBA VirtualProtect GetVersionExA ReadConsoleInputW GetCurrentProcessId SetFileAttributesW GetVolumeInformationW GetTempPathW GetComputerNameA EncodePointer DecodePointer ExitProcess GetModuleHandleExW WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW

gdi32

DeleteMetaFile

Sharing

General

Malware Config

Signatures

File Explorer

e2181c2596042502e2da7a84f66d2bfad210c3a3c1ab9b410ad6129e58877b2b

kernel32

gdi32

generic