9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead

General

Target
9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead
Size 203KB
Sample240105-s2vdmsehcm
SHA256 9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead
MD5 8677a42b0c081790accfba5cadd0e065
SHA1 915546139b571c9c3857aa1641c6ce83713cec63
SHA512 8c341b952e1af5c2a0fcf1586062cc0cace8b6c347f85bf5452515ae4bf4351a8b757c708a78b36d49583afce2a93f9213a5ca7518edbc0ca19274b671795127
SSDEEP 3072:GUHcLIUjhmhX3MYYIHYT1vfkDmP6xjFK0jhBgsvNrRcJcN:GU8LXmV8YhHYGd8s7c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead

File Explorer

9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead

.exe 203KB

9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead

IMPHASH 6f1fc954688432f7f49adfc545cb497d
SHA256 9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead
MD5 8677a42b0c081790accfba5cadd0e065
SHA1 915546139b571c9c3857aa1641c6ce83713cec63
SHA512 8c341b952e1af5c2a0fcf1586062cc0cace8b6c347f85bf5452515ae4bf4351a8b757c708a78b36d49583afce2a93f9213a5ca7518edbc0ca19274b671795127
SSDEEP 3072:GUHcLIUjhmhX3MYYIHYT1vfkDmP6xjFK0jhBgsvNrRcJcN:GU8LXmV8YhHYGd8s7c
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7843

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW GetLocaleInfoA WriteConsoleOutputCharacterA InterlockedDecrement QueryDosDeviceA InterlockedCompareExchange SetComputerNameW GetComputerNameW GetModuleHandleW GetTickCount GetCommConfig VirtualFree GetConsoleAliasesLengthA GlobalFindAtomA LoadLibraryW SetConsoleMode GetConsoleAliasW GetWriteWatch WriteConsoleW FindFirstChangeNotificationW SetThreadPriority GetStartupInfoA GetLastError SetLastError GetProcAddress VirtualAlloc SetFileAttributesA InterlockedExchangeAdd LocalAlloc CreateHardLinkW TransmitCommChar AddAtomW FindFirstVolumeMountPointA IsDebuggerPresent GetStringTypeW GetCurrentProcessId DeleteFileA lstrcpyA GetNativeSystemInfo SetComputerNameExW GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA HeapSize

gdi32

GetCharABCWidthsFloatW WidenPath

shell32

ShellAboutW

Sharing

General

Malware Config

Signatures

File Explorer

9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead

kernel32

gdi32

shell32

generic