2e8803530006789f5519f011b8ab0c5ce666232d9419a88d21d8dd5108af7892

General

Target
2e8803530006789f5519f011b8ab0c5ce666232d9419a88d21d8dd5108af7892
Size 446KB
Sample241107-m3c8vs1ekk
SHA256 2e8803530006789f5519f011b8ab0c5ce666232d9419a88d21d8dd5108af7892
MD5 e4e379b5b282b79ce8482c75965a9aee
SHA1 6276bbe4d6288f3066cab3b5b0b75168e8b4ab6b
SHA512 f7612b99b14a50bbdd06cebbf1f2ca1872a8e73a6350e6bdce94fc951df2fd9cd89a6c31be98d3bf77666ae81fd933c48a54751868e63354749407cfeced8e33
SSDEEP 12288:S8ejRy6JaJelQM6uGOKMaWxHJpizjWs4M:XqYes3MxxHJpR7M
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e8803530006789f5519f011b8ab0c5ce666232d9419a88d21d8dd5108af7892

File Explorer

2e8803530006789f5519f011b8ab0c5ce666232d9419a88d21d8dd5108af7892

.exe 446KB

2e8803530006789f5519f011b8ab0c5ce666232d9419a88d21d8dd5108af7892

IMPHASH 311650a1714368ee828d4a890d9baf3c
SHA256 2e8803530006789f5519f011b8ab0c5ce666232d9419a88d21d8dd5108af7892
MD5 e4e379b5b282b79ce8482c75965a9aee
SHA1 6276bbe4d6288f3066cab3b5b0b75168e8b4ab6b
SHA512 f7612b99b14a50bbdd06cebbf1f2ca1872a8e73a6350e6bdce94fc951df2fd9cd89a6c31be98d3bf77666ae81fd933c48a54751868e63354749407cfeced8e33
SSDEEP 12288:S8ejRy6JaJelQM6uGOKMaWxHJpizjWs4M:XqYes3MxxHJpR7M
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

226736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gotenuyed4.pdb

kernel32

FindFirstVolumeA WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeA TerminateThread FatalExit GetVersionExA GetConsoleAliasesLengthA SetConsoleCP VerifyVersionInfoA VerLanguageNameA FindFirstFileExA FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileW TlsSetValue VerifyVersionInfoW GetConsoleCursorInfo TzSpecificLocalTimeToSystemTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc SleepEx TlsGetValue MoveFileW GetCommandLineW InterlockedExchange DeleteFileA CreateActCtxW SetFileAttributesA GetPrivateProfileIntW HeapValidate GetProcessHeaps CreateNamedPipeA WriteConsoleOutputW GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError GetProfileStringW GetCalendarInfoA GetTickCount GetSystemTime DebugBreak FindFirstFileA WriteFileGather ReadFile GetNumberOfConsoleMouseButtons GetSystemWow64DirectoryW TerminateProcess lstrcatW CreateActCtxA InterlockedPopEntrySList SetCriticalSectionSpinCount DefineDosDeviceA WriteConsoleW InterlockedDecrement HeapWalk SetErrorMode PeekConsoleInputW GetNumberFormatW GetQueuedCompletionStatus FreeEnvironmentStringsA SetLocalTime FindResourceExW CreateSemaphoreW GetThreadLocale SetFileShortNameA lstrcpyW ReplaceFileW LockFile MoveFileExW GetConsoleCP GetVolumePathNameW SetConsoleScreenBufferSize FreeConsole GetConsoleAliasExesLengthW WriteConsoleInputW LocalShrink SetCommState SetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile ChangeTimerQueueTimer GetWriteWatch RaiseException OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetLastError GetComputerNameW OpenMutexA GetStringTypeA VirtualUnlock SetWaitableTimer CreateTimerQueueTimer GetProcessTimes IsBadWritePtr FatalAppExitA lstrcpynW SetNamedPipeHandleState FillConsoleOutputCharacterW GetCompressedFileSizeW FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringA LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW ReadFileEx EncodePointer DecodePointer HeapSetInformation GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW IsBadReadPtr IsProcessorFeaturePresent TlsAlloc GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement ExitProcess WriteFile GetStdHandle EnterCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate SetFilePointer WideCharToMultiByte GetConsoleMode OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind SetStdHandle GetStringTypeW LCMapStringW FlushFileBuffers CreateFileW CloseHandle

user32

OemToCharA GetAltTabInfoA

Sharing

General

Malware Config

Signatures

File Explorer

2e8803530006789f5519f011b8ab0c5ce666232d9419a88d21d8dd5108af7892

kernel32

user32

generic