96619faca0ee6f1b1c4d99bb81e08bc2ac4e9197ccb6b0de5abf3538bb05a8ea

General

Target
96619faca0ee6f1b1c4d99bb81e08bc2ac4e9197ccb6b0de5abf3538bb05a8ea
Size 1.2MB
Sample241109-mbtrjasfjj
SHA256 96619faca0ee6f1b1c4d99bb81e08bc2ac4e9197ccb6b0de5abf3538bb05a8ea
MD5 2201c7f911113adf4bd9493362a3e4dd
SHA1 d34e933bbce5254548e1b9387b2e27ab21b043c7
SHA512 7ab908a287275e6e066477fd8860f59abbffdd00ce146410520849d06600a131266a83ed66757b2588b00fa8bf1ad81cbeaad776c5d61ffd47ecae2270fd1fb3
SSDEEP 24576:Vs2EkDKc0UEpRfPvnK6fkU1iPCmGafyTAqYW82xxy0hWD5UhgLany+FRsa:2kCUqivPBaAa82xo0ha2Lnya
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96619faca0ee6f1b1c4d99bb81e08bc2ac4e9197ccb6b0de5abf3538bb05a8ea

File Explorer

96619faca0ee6f1b1c4d99bb81e08bc2ac4e9197ccb6b0de5abf3538bb05a8ea

.exe 1.2MB

96619faca0ee6f1b1c4d99bb81e08bc2ac4e9197ccb6b0de5abf3538bb05a8ea

IMPHASH 8343a262286978d40d4bf43c0a822079
SHA256 96619faca0ee6f1b1c4d99bb81e08bc2ac4e9197ccb6b0de5abf3538bb05a8ea
MD5 2201c7f911113adf4bd9493362a3e4dd
SHA1 d34e933bbce5254548e1b9387b2e27ab21b043c7
SHA512 7ab908a287275e6e066477fd8860f59abbffdd00ce146410520849d06600a131266a83ed66757b2588b00fa8bf1ad81cbeaad776c5d61ffd47ecae2270fd1fb3
SSDEEP 24576:Vs2EkDKc0UEpRfPvnK6fkU1iPCmGafyTAqYW82xxy0hWD5UhgLany+FRsa:2kCUqivPBaAa82xo0ha2Lnya
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gazo.pdb

kernel32

GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA GetDateFormatA TzSpecificLocalTimeToSystemTime EnumResourceTypesA TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnfix GetCPInfoExW GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc HeapSize GetProcessPriorityBoost GetConsoleDisplayMode GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA WriteProfileSectionA lstrlenA HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsFree GetCurrentThreadId LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush SetCaretPos RegisterClassA CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

96619faca0ee6f1b1c4d99bb81e08bc2ac4e9197ccb6b0de5abf3538bb05a8ea

kernel32

user32

gdi32

generic