0e9cd3a18f2ca5e439da58da9d4dc112b84728135447794ee0e32c0c84ba309d

General

Target
0e9cd3a18f2ca5e439da58da9d4dc112b84728135447794ee0e32c0c84ba309d
Size 311KB
Sample230925-bz8d2sce56
SHA256 0e9cd3a18f2ca5e439da58da9d4dc112b84728135447794ee0e32c0c84ba309d
MD5 f761fb543feb14ec08a504bca0bfbab9
SHA1 fbee8b147162cf5bf88a7ddb25620867e7941a64
SHA512 5deaf4126f60aaab284bdf12a5095dc0a591ba01ee2a054e7aef3e512cccb9514c55f07d1f7afcb5b7082a0976e30ffd836ec386a68d0e09a2547b53819221c8
SSDEEP 6144:vPDklTtka3q1Q1dRSW2EEiQvtOCVFkd+L6+Wy:HETKaqaZt/E/tOCnte+7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e9cd3a18f2ca5e439da58da9d4dc112b84728135447794ee0e32c0c84ba309d

File Explorer

0e9cd3a18f2ca5e439da58da9d4dc112b84728135447794ee0e32c0c84ba309d

.exe 311KB

0e9cd3a18f2ca5e439da58da9d4dc112b84728135447794ee0e32c0c84ba309d

IMPHASH 915313f9baf3d4fbe9e467fb8242a50c
SHA256 0e9cd3a18f2ca5e439da58da9d4dc112b84728135447794ee0e32c0c84ba309d
MD5 f761fb543feb14ec08a504bca0bfbab9
SHA1 fbee8b147162cf5bf88a7ddb25620867e7941a64
SHA512 5deaf4126f60aaab284bdf12a5095dc0a591ba01ee2a054e7aef3e512cccb9514c55f07d1f7afcb5b7082a0976e30ffd836ec386a68d0e09a2547b53819221c8
SSDEEP 6144:vPDklTtka3q1Q1dRSW2EEiQvtOCVFkd+L6+Wy:HETKaqaZt/E/tOCnte+7
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21693

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceW DeleteVolumeMountPointA EnumCalendarInfoW ReadConsoleA GetCurrentProcess CreateJobObjectW GetEnvironmentStringsW GetModuleHandleExW GetComputerNameW SetCommBreak GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GetCommandLineA TzSpecificLocalTimeToSystemTime GetEnvironmentStrings GetConsoleCP GlobalAlloc LoadLibraryW SetCommConfig GetLocaleInfoW IsBadCodePtr DeleteVolumeMountPointW TransactNamedPipe EnumSystemCodePagesA GetTimeFormatW HeapQueryInformation GetCompressedFileSizeA GetDriveTypeW DisconnectNamedPipe GetNamedPipeHandleStateW SetCurrentDirectoryA GetLastError GetCurrentDirectoryW ChangeTimerQueueTimer SetLastError LocalAlloc GetFileType MoveFileA RemoveDirectoryW SetFileApisToANSI FindNextFileA GetModuleHandleA SetLocaleInfoW FatalExit RequestDeviceWakeup CreateMailslotA GetStringTypeW VirtualProtect GetCurrentDirectoryA QueryPerformanceFrequency PeekConsoleInputA GetShortPathNameW FindFirstVolumeA TerminateJobObject FindAtomW AddConsoleAliasA OpenFileMappingA EnumSystemLocalesW CreateFileW GetConsoleAliasExesA GetConsoleAliasesLengthW SetDefaultCommConfigA WriteConsoleInputW GetStartupInfoW GetTempFileNameW DeleteFileA HeapReAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection HeapCreate SetFilePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte SetStdHandle GetConsoleMode FlushFileBuffers HeapSize LCMapStringW ReadFile WriteConsoleW CloseHandle

user32

CharUpperW

gdi32

GetTextFaceA GetCharWidthA SetBkColor

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

0e9cd3a18f2ca5e439da58da9d4dc112b84728135447794ee0e32c0c84ba309d

kernel32

user32

gdi32

advapi32