PI YW-201123[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
PI YW-201123.zip
Size 323KB
Sample230720-ndpq2agf8v
SHA256 6d9352c69f57555cb6d8a4c038bf6d37259136618429c9432c13516701e27274
MD5 2fcca15c1395bb3ff8f85df226fa1e64
SHA1 7a8e817d7d14900c70f9c67266d80b7cb2d97931
SHA512 79bb096d07f6ec5923f7c92d19180d6363e07538c85328932a25b0c8120a136cbf4dc72e83f152d0d7e104e7ea431f0a8b9521ff6b40fdaf5f4222973f3b6d89
SSDEEP 6144:gpU8PLHReXARAPY41jUiwI5mPqQy3LKjVdTuSBD0StUpbqa1Aov0BBOSS0VxOP:qPLxe+APY+UiBQybKjfT/+OIqPPOP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PI YW-201123.exe

File Explorer

PI YW-201123.zip

.zip 323KB
PI YW-201123.exe

.exe 338KB

PI YW-201123.zip

SHA256 6d9352c69f57555cb6d8a4c038bf6d37259136618429c9432c13516701e27274
MD5 2fcca15c1395bb3ff8f85df226fa1e64
SHA1 7a8e817d7d14900c70f9c67266d80b7cb2d97931
SHA512 79bb096d07f6ec5923f7c92d19180d6363e07538c85328932a25b0c8120a136cbf4dc72e83f152d0d7e104e7ea431f0a8b9521ff6b40fdaf5f4222973f3b6d89
SSDEEP 6144:gpU8PLHReXARAPY41jUiwI5mPqQy3LKjVdTuSBD0StUpbqa1Aov0BBOSS0VxOP:qPLxe+APY+UiBQybKjfT/+OIqPPOP
MD5 SHA1 SHA512 SSDEEP

PI YW-201123.exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 d46f7e127f48d7fc3d018fd53e2c7d473c6c54d1f3e2cabec145becbd247a717
MD5 27de92ea28f11ed9a1b327f6df81deab
SHA1 5e4bd89351040e293aa47a65c83c4705a92ed0fb
SHA512 e1e08d7a03a410b785f9d699b3aad97620f397c2898e0447482c731fd24e29fdf756ccf178a918782e12ef7f70263a565659c29a35e32bbbbfd78b4b4f5f7328
SSDEEP 6144:PYa6usXhrARAhY41lUkwS5mr4Qy9LKjVdluSBXgStypbqK1AonEBDOES0VYOu:PY4q4AhYmUkbQyJKjfl/mOqAjKOu
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13888

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW