0bb99277b33ef193bd3c3d5d36e5072502dadd288146b605ea6f2c2c92ae3bea

General

Target
0bb99277b33ef193bd3c3d5d36e5072502dadd288146b605ea6f2c2c92ae3bea
Size 381KB
Sample230504-s8ddpsde24
SHA256 0bb99277b33ef193bd3c3d5d36e5072502dadd288146b605ea6f2c2c92ae3bea
MD5 9e122f5b14d1e0acdb56d29450fde2a2
SHA1 ebe8ceb257476594a6024dc12c7cf0ab3f2da21b
SHA512 eca065af0b882973a9682fa61b7465148127081d4c59aff500527eb5c9036d6190f8d5e45b9281d739e879b2754e8a9732f596e65682807ece6c78a9a230ad15
SSDEEP 6144:1YSPHkGUKfWnNEhQ2tmq5oF60YzLmq2pePbPJJUst:iScGUEWNScq5/0hq2MTPrJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bb99277b33ef193bd3c3d5d36e5072502dadd288146b605ea6f2c2c92ae3bea

File Explorer

0bb99277b33ef193bd3c3d5d36e5072502dadd288146b605ea6f2c2c92ae3bea

.exe 381KB

0bb99277b33ef193bd3c3d5d36e5072502dadd288146b605ea6f2c2c92ae3bea

IMPHASH 16e2f5555f1a0fa40e68c1b98dd19ce4
SHA256 0bb99277b33ef193bd3c3d5d36e5072502dadd288146b605ea6f2c2c92ae3bea
MD5 9e122f5b14d1e0acdb56d29450fde2a2
SHA1 ebe8ceb257476594a6024dc12c7cf0ab3f2da21b
SHA512 eca065af0b882973a9682fa61b7465148127081d4c59aff500527eb5c9036d6190f8d5e45b9281d739e879b2754e8a9732f596e65682807ece6c78a9a230ad15
SSDEEP 6144:1YSPHkGUKfWnNEhQ2tmq5oF60YzLmq2pePbPJJUst:iScGUEWNScq5/0hq2MTPrJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24716

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameW GetModuleHandleW GetNumberFormatA ReadConsoleW EnumTimeFormatsA EnumTimeFormatsW EnumResourceTypesA SetProcessPriorityBoost ActivateActCtx FindResourceExA GetCalendarInfoA GetSystemWindowsDirectoryA HeapCreate EnumSystemCodePagesA FindNextVolumeW GetConsoleAliasW Beep GetModuleFileNameW GetConsoleFontSize CreateActCtxA GetACP lstrlenW GlobalUnlock EnumSystemLocalesA GetConsoleAliasesW GetCPInfoExW GetLastError GetLongPathNameW GetProcAddress VirtualAlloc AddConsoleAliasW IsBadHugeWritePtr BeginUpdateResourceW WriteProfileSectionA RemoveDirectoryA SetComputerNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc WriteProfileSectionW AddAtomA FindAtomA GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW GetShortPathNameW GetDiskFreeSpaceExW GetWindowsDirectoryW DeleteTimerQueueTimer GetTempPathA EnumCalendarInfoExA SuspendThread CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP SetStdHandle FlushFileBuffers GetModuleHandleA WaitForSingleObject QueryDosDeviceA lstrlenA GetCurrentActCtx ReadConsoleA HeapSize InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount

user32

ToAsciiEx ChangeMenuA CharLowerBuffW SetParent CreateAcceleratorTableW GetWindowLongA GetSysColorBrush GetKeyNameTextW GetMenuInfo

gdi32

GetColorAdjustment GetCharABCWidthsW GetCharWidthA

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

0bb99277b33ef193bd3c3d5d36e5072502dadd288146b605ea6f2c2c92ae3bea

kernel32

user32

gdi32

advapi32