sub_e19e0e7f8871[.]bin

General

Target
sub_e19e0e7f8871.bin
Size 675KB
Sample260524-b58a8set9j
SHA256 e19e0e7f8871e7acf07a37b277b5aaf2aa125f28ee11644c335eb313ec768df5
MD5 dce4b1e6a5f9b6d836913013606371ce
SHA1 b451c6be54e900b27b127fdabeea76a69337081f
SHA512 2c190d087f558f89bae07c4ddd47f8ed8c23a006ebf422583f01a01d3bced22fa617762e5f3709bec48e44b1e5c23707d5c326f91f837185e6aabaede01812ed
SSDEEP 12288:z3lUN6O5j1MBpxqB8p8xsd0goski8EcwUhB5+OiCYCsdOrSb2nTBJ:z3ltO5jWBz2/gEoCY9anTBJ
TLSH
T146E4021575B1D433D9F60A705470C7A1297ABC622A60B18FB7433F6F5EB22D2B632392
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sub_e19e0e7f8871.bin

File Explorer

sub_e19e0e7f8871.bin

.exe 675KB

sub_e19e0e7f8871.bin

IMPHASH 9500feeae6f2027f3e5f8d8ceaf88edd
SHA256 e19e0e7f8871e7acf07a37b277b5aaf2aa125f28ee11644c335eb313ec768df5
MD5 dce4b1e6a5f9b6d836913013606371ce
SHA1 b451c6be54e900b27b127fdabeea76a69337081f
SHA512 2c190d087f558f89bae07c4ddd47f8ed8c23a006ebf422583f01a01d3bced22fa617762e5f3709bec48e44b1e5c23707d5c326f91f837185e6aabaede01812ed
SSDEEP 12288:z3lUN6O5j1MBpxqB8p8xsd0goski8EcwUhB5+OiCYCsdOrSb2nTBJ:z3ltO5jWBz2/gEoCY9anTBJ
TLSH
T146E4021575B1D433D9F60A705470C7A1297ABC622A60B18FB7433F6F5EB22D2B632392
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

524391

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zokim\tatiwehivagowu_vesahig35 yaxufoterotit-kebo.pdb

kernel32

GetConsoleAliasesLengthA GetTapePosition GetLongPathNameA GetUserDefaultLangID AddRefActCtx GetCPInfoExA WriteConsoleInputW ReadConsoleInputW GetTapeParameters WaitCommEvent GetNumaNodeProcessorMask GetConsoleCP VerifyVersionInfoA WaitNamedPipeW CreateMutexA WriteConsoleW GetLastError CreateFileA DeleteFileW WritePrivateProfileSectionA GetPrivateProfileSectionW GetLongPathNameW SetStdHandle LoadLibraryW IsDebuggerPresent FindFirstVolumeW WriteFile BuildCommDCBW FindActCtxSectionStringW VerLanguageNameW SetFileShortNameA WriteProcessMemory GetFileAttributesW OpenEventA SetEvent IsBadReadPtr Sleep WaitForSingleObject LoadResource EnumDateFormatsW FreeConsole SetConsoleCtrlHandler SetConsoleTitleW GetCurrentConsoleFont SetConsoleTextAttribute AttachConsole GetConsoleAliasesLengthW ReadConsoleA ReadConsoleOutputW GetSystemWindowsDirectoryW GetStringTypeW BuildCommDCBAndTimeoutsA HeapUnlock HeapLock GetAtomNameW HeapReAlloc HeapCompact GetGeoInfoW GetCurrentProcess GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetACP WaitForMultipleObjects VerifyVersionInfoW WriteConsoleOutputCharacterA LocalAlloc SetMailslotInfo GetCPInfoExW SetEnvironmentVariableW SetCalendarInfoA CommConfigDialogA GetConsoleWindow FindAtomW SetFileApisToOEM GetStringTypeA HeapSize GetDiskFreeSpaceA GetProfileIntA InterlockedPopEntrySList UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapAlloc EnterCriticalSection LeaveCriticalSection TerminateProcess GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement ExitProcess GetStdHandle GetModuleFileNameA SetFilePointer SetHandleCount GetFileType DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetOEMCP IsValidCodePage VirtualAlloc MultiByteToWideChar RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP CloseHandle

gdi32

GetCharWidthFloatA

Sharing