00989dd92c1d87b9652f1264888f8e9f

General

Target
00989dd92c1d87b9652f1264888f8e9f
Size 11.2MB
Sample231229-w71z6abcfp
SHA256 1da02515700ea587c82946f00859c0b40812fe9c063144a4e06711764fea00c0
MD5 00989dd92c1d87b9652f1264888f8e9f
SHA1 8554adcde5266de2e6002df066c0134626535eee
SHA512 be7e344c311a1f7e4cad8fedfb2b8ef79f75a2c89b09ef685f4d4014cd2629e982eeed8af514a769d0acbd9d81b2a7f49264107bcc2fae1ded8c0a07c7101e3e
SSDEEP 3072:DdIKxNiT/X910MzPvrmJXOWYL1DyHSHbfTYBDsopr7p85KzqyROF5LevXZUmoBZH:DdIKziTP910Uwq1uH4gBDs8BgRn2x
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00989dd92c1d87b9652f1264888f8e9f

File Explorer

00989dd92c1d87b9652f1264888f8e9f

.exe 11.2MB

00989dd92c1d87b9652f1264888f8e9f

IMPHASH 3413753a659434cf48b4c501630fefbc
SHA256 1da02515700ea587c82946f00859c0b40812fe9c063144a4e06711764fea00c0
MD5 00989dd92c1d87b9652f1264888f8e9f
SHA1 8554adcde5266de2e6002df066c0134626535eee
SHA512 be7e344c311a1f7e4cad8fedfb2b8ef79f75a2c89b09ef685f4d4014cd2629e982eeed8af514a769d0acbd9d81b2a7f49264107bcc2fae1ded8c0a07c7101e3e
SSDEEP 3072:DdIKxNiT/X910MzPvrmJXOWYL1DyHSHbfTYBDsopr7p85KzqyROF5LevXZUmoBZH:DdIKziTP910Uwq1uH4gBDs8BgRn2x
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5776

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA UnregisterWait SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesLengthA MapUserPhysicalPages InterlockedIncrement InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW GlobalLock GetProfileSectionA WriteConsoleInputA CreateNamedPipeW VirtualFree GenerateConsoleCtrlEvent GetWindowsDirectoryA GetConsoleAliasExesW WriteFile SetCommState SetProcessPriorityBoost TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment GetVersionExW InitAtomTable GlobalFlags GetComputerNameExA GetConsoleAliasW SetConsoleCursorPosition ReadFile GetBinaryTypeW VirtualUnlock InterlockedExchange GetFileSizeEx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FreeLibraryAndExitThread GetProcAddress VerLanguageNameA SetFirmwareEnvironmentVariableW WriteProfileSectionA SetStdHandle SetComputerNameA VerLanguageNameW GetLocalTime LoadLibraryA OpenMutexA CreateSemaphoreW WriteProfileSectionW SetSystemTime Process32NextW CreateIoCompletionPort SetConsoleTitleW FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW BuildCommDCBA GetCurrentDirectoryA CompareStringA GetFileAttributesExW GetConsoleCursorInfo GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW ReadConsoleOutputCharacterW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW DeleteFileA FlushFileBuffers GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess TlsGetValue TlsAlloc GetCurrentThreadId TlsFree SetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

00989dd92c1d87b9652f1264888f8e9f

kernel32

user32

generic