9700a09a3bf281d8307f602ec4e1c8cd

General

Target
9700a09a3bf281d8307f602ec4e1c8cd
Size 363KB
Sample231222-qa671sffe2
SHA256 75bbf52fb165c887877cf2bb525656b2ea10cfe0585fab997789f74a73156ccd
MD5 9700a09a3bf281d8307f602ec4e1c8cd
SHA1 e7b34adb8a1c72abc3ee8076b3139d236b69a3ab
SHA512 d7e5b4c2d7d005c6720e4c51c399d01699a934f9b8b148cc08e078be5572cea9720c39ce02d429db83d67d9c1b3c66c27c77b08563b8379ba56881baa5aac2df
SSDEEP 6144:XbL40jFVv3sfVJomPHnXPhKjSSDlgw3bT2zd4sL7boJ20Pkf1gbzzWAOA:zDv8fVJ7HnXJKj1Gw3bTUd4sfbologby
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9700a09a3bf281d8307f602ec4e1c8cd

File Explorer

9700a09a3bf281d8307f602ec4e1c8cd

.exe 363KB

9700a09a3bf281d8307f602ec4e1c8cd

IMPHASH 4f8209c5b4ed49d19335a3290f6cce63
SHA256 75bbf52fb165c887877cf2bb525656b2ea10cfe0585fab997789f74a73156ccd
MD5 9700a09a3bf281d8307f602ec4e1c8cd
SHA1 e7b34adb8a1c72abc3ee8076b3139d236b69a3ab
SHA512 d7e5b4c2d7d005c6720e4c51c399d01699a934f9b8b148cc08e078be5572cea9720c39ce02d429db83d67d9c1b3c66c27c77b08563b8379ba56881baa5aac2df
SSDEEP 6144:XbL40jFVv3sfVJomPHnXPhKjSSDlgw3bT2zd4sL7boJ20Pkf1gbzzWAOA:zDv8fVJ7HnXJKj1Gw3bTUd4sfbologby
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime GetNativeSystemInfo lstrlenA CopyFileExW GetStringTypeA InterlockedIncrement ReadConsoleA InterlockedDecrement CompareFileTime GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetCurrentThread WriteFile SetCommState GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW GlobalFlags GetExitCodeProcess IsDBCSLeadByte ReadFile SetThreadPriority GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW CreateDirectoryA GetStartupInfoA SetThreadLocale GetLastError GetProcAddress GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA GetFileType SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA Process32NextW CreateIoCompletionPort QueryMemoryResourceNotification EnumResourceNamesA GetCPInfoExA TlsAlloc ReadConsoleOutputCharacterW GetSystemTime DeleteFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA GetModuleHandleA

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

9700a09a3bf281d8307f602ec4e1c8cd

kernel32

user32

msimg32

generic