04d99cbb7da10ece32d1db33fbad3cf8

General

Target
04d99cbb7da10ece32d1db33fbad3cf8
Size 291KB
Sample231221-zhf58sdcem
SHA256 84fc78fa3b47bdd23036534800547529afba5c93ed20bbf7dd45b20d44890d64
MD5 04d99cbb7da10ece32d1db33fbad3cf8
SHA1 d408b3a419dc6e9e639949eed941c24b53d4b185
SHA512 99d80256292336a675a0678dcaf7b322ec083564938af6e3c9329e1256f2bb0d2fee10082102f7a8287838acd081d8006ff08f0c1993acc5910e319fd4145a40
SSDEEP 6144:iGcqFjP9nO5pKQQ3adi9pF1h3S4e+VSkHcfKvaPRVSqzqdl:/dP9nO5pKQQei9pPhCpkHceaPTSddl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d99cbb7da10ece32d1db33fbad3cf8

File Explorer

04d99cbb7da10ece32d1db33fbad3cf8

.exe 291KB

04d99cbb7da10ece32d1db33fbad3cf8

IMPHASH b9983337585a5531070ddcc78e55fc2d
SHA256 84fc78fa3b47bdd23036534800547529afba5c93ed20bbf7dd45b20d44890d64
MD5 04d99cbb7da10ece32d1db33fbad3cf8
SHA1 d408b3a419dc6e9e639949eed941c24b53d4b185
SHA512 99d80256292336a675a0678dcaf7b322ec083564938af6e3c9329e1256f2bb0d2fee10082102f7a8287838acd081d8006ff08f0c1993acc5910e319fd4145a40
SSDEEP 6144:iGcqFjP9nO5pKQQ3adi9pF1h3S4e+VSkHcfKvaPRVSqzqdl:/dP9nO5pKQQei9pPhCpkHceaPTSddl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime FindFirstChangeNotificationW lstrlenA CopyFileExW GetStringTypeA GetCPInfo InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA CompareFileTime GlobalLock CancelWaitableTimer GetModuleHandleW GetCurrentThread GetSystemTimeAsFileTime WriteFile SetCommState GetCommandLineA GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW GlobalFlags IsProcessorFeaturePresent TerminateProcess SetThreadPriority GetStartupInfoW GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW CreateDirectoryA InterlockedExchange GetStartupInfoA SetThreadLocale GetLastError GetCurrentDirectoryW GetProcAddress SetFirmwareEnvironmentVariableW SearchPathA GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA Process32FirstW LocalAlloc GetFileType CreateFileMappingW SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA SetEnvironmentVariableA QueryMemoryResourceNotification FreeEnvironmentStringsW EnumResourceNamesA RequestWakeupLatency GetCPInfoExA TlsAlloc FindAtomW ReadConsoleOutputCharacterW GetSystemTime GetProfileSectionW DeleteFileA CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId ExitProcess GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

04d99cbb7da10ece32d1db33fbad3cf8

kernel32

user32

msimg32

generic