MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 2e4937d9881cbbdce22d794992382cc914b1f14543a71c17b7bfc7eb9e49a558. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 2e4937d9881cbbdce22d794992382cc914b1f14543a71c17b7bfc7eb9e49a558 |
|---|---|
| SHA3-384 hash: | 4d5cfd4eca6c7f28a5eb4d1ff76ad6c4233f7d101972151b35a75cb7d32836fb37aaac8d1782c49301d4028078b0f1ff |
| SHA1 hash: | 7901f05910ea0f6feb251b891a87d8722b99dfe6 |
| MD5 hash: | a93b9b48c74c1379c9d2d5f9654ae0dc |
| humanhash: | lion-pizza-zebra-autumn |
| File name: | 8f8b3d31556992f736cb747ce3ccb669.exe |
| Download: | download sample |
| File size: | 171'520 bytes |
| First seen: | 2020-03-26 14:52:40 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| ssdeep | 3072:mGyx5cub5EFmEFpXIuDjohwTqvvAMzmbU2u7+K8zy9edGh+a:wd05Iu3qwTqv4u32u71x926 |
| Threatray | 2'967 similar samples on MalwareBazaar |
| TLSH | 6CF3AF75DA41D031E2B301F5FA7D0B7B883E0E3176A5A0E6A3A116E46EB4495B42E31F |
| Reporter |  abuse_ch |
| Tags: | exe GuLoader |
abuse_ch
Payload dropped by GuLoader from the following URL:http://altoinfor.co/files/bin_encrypted_4C627F0.bin
Intelligence
File Origin
Vendor Threat Intelligence
File information
The table below shows additional information about this malware sample such as delivery method and external references.
50a20696c8baa53210cea5dfd671cb4838fb594ca62d0e893bfac1dc2fa8e8b9
exe 2e4937d9881cbbdce22d794992382cc914b1f14543a71c17b7bfc7eb9e49a558
(this sample)
BLint
The following table provides more information about this file using BLint. BLint is a Binary Linter to check the security properties, and capabilities in executables.
Findings
| ID | Title | Severity |
|---|---|---|
| CHECK_AUTHENTICODE | Missing Authenticode | high |
| CHECK_DLL_CHARACTERISTICS | Missing dll Security Characteristics (HIGH_ENTROPY_VA) | high |
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.