f9d8c87011a85280664db15b9561ddc0

General

Target
f9d8c87011a85280664db15b9561ddc0
Size 339KB
Sample231222-vfdj4sdcf9
SHA256 32acadd5cb9e6594707c809f7b63261b93966ace27204fc22c114d67c9196383
MD5 f9d8c87011a85280664db15b9561ddc0
SHA1 68a2c14735ec8674c29cc603b5e0a3267233a41b
SHA512 9cc85e3140432a5400815e01c2dbf9cd9d3642481ea653b526470ee139888a97d0e609e7a15769093f6a0a9992b5657e750064e198873ac5621b8ee68cf920e4
SSDEEP 6144:C4gzF5KTNQw/w7FtYVdoSWdKyM8iYLMy7CQLzIhoVpOYj6:0XKTNQwA/YUSWdg8iYIsCQvIhIOYj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9d8c87011a85280664db15b9561ddc0

File Explorer

f9d8c87011a85280664db15b9561ddc0

.exe 339KB

f9d8c87011a85280664db15b9561ddc0

IMPHASH 69664ea36ab9a3e93e02fa2b7fdf56ab
SHA256 32acadd5cb9e6594707c809f7b63261b93966ace27204fc22c114d67c9196383
MD5 f9d8c87011a85280664db15b9561ddc0
SHA1 68a2c14735ec8674c29cc603b5e0a3267233a41b
SHA512 9cc85e3140432a5400815e01c2dbf9cd9d3642481ea653b526470ee139888a97d0e609e7a15769093f6a0a9992b5657e750064e198873ac5621b8ee68cf920e4
SSDEEP 6144:C4gzF5KTNQw/w7FtYVdoSWdKyM8iYLMy7CQLzIhoVpOYj6:0XKTNQwA/YUSWdg8iYIsCQvIhIOYj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime GetNativeSystemInfo lstrlenA CopyFileExW GetStringTypeA GetCPInfo InterlockedIncrement ReadConsoleA InterlockedDecrement CompareFileTime GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetCurrentThread GetSystemTimeAsFileTime WriteFile SetCommState GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW GlobalFlags TerminateProcess ReadFile SetThreadPriority GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW CreateDirectoryA GetStartupInfoA SetThreadLocale GetLastError GetProcAddress GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA Process32FirstW GetFileType SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA CreateIoCompletionPort QueryMemoryResourceNotification EnumResourceNamesA GetCPInfoExA TlsAlloc ReadConsoleOutputCharacterW GetSystemTime DeleteFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA GetModuleHandleA

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

f9d8c87011a85280664db15b9561ddc0

kernel32

user32

msimg32

generic