3093ee9afd5b7d6917cad8f9ecfbabd6c925b5ad3279ecd74bf4fe60cadb5999

Resubmissions

09/02/2024, 00:09

240209-afrrhsef3710

08/02/2024, 23:57

240208-3zj51aee4210

Sharing

Copy URL Twitter E-mail

General

Target
3093ee9afd5b7d6917cad8f9ecfbabd6c925b5ad3279ecd74bf4fe60cadb5999
Size 169KB
Sample240209-afrrhsef37
SHA256 3093ee9afd5b7d6917cad8f9ecfbabd6c925b5ad3279ecd74bf4fe60cadb5999
MD5 f3d3ba34d39bb2cb6fd00ca04ff4defd
SHA1 8f7a889828996be220fa9d3dfb2f771f967b012b
SHA512 15f62ebc73a9f6a407867167dfa7c894697eb7082a12341e1d330cbb2976bd2265edcd6699931b13c1ed48c306c7076599a0d64c12e02361be3f2b60df8a3a76
SSDEEP 3072:MHm/6pwpVbU3Q1GrTnQlOuI575A/awowXAJ6XoeT:MHmmwpUykTnQIA/PN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3093ee9afd5b7d6917cad8f9ecfbabd6c925b5ad3279ecd74bf4fe60cadb5999

File Explorer

3093ee9afd5b7d6917cad8f9ecfbabd6c925b5ad3279ecd74bf4fe60cadb5999

.exe 169KB

3093ee9afd5b7d6917cad8f9ecfbabd6c925b5ad3279ecd74bf4fe60cadb5999

IMPHASH 55e8353f802707422a3462a3bab24fd9
SHA256 3093ee9afd5b7d6917cad8f9ecfbabd6c925b5ad3279ecd74bf4fe60cadb5999
MD5 f3d3ba34d39bb2cb6fd00ca04ff4defd
SHA1 8f7a889828996be220fa9d3dfb2f771f967b012b
SHA512 15f62ebc73a9f6a407867167dfa7c894697eb7082a12341e1d330cbb2976bd2265edcd6699931b13c1ed48c306c7076599a0d64c12e02361be3f2b60df8a3a76
SSDEEP 3072:MHm/6pwpVbU3Q1GrTnQlOuI575A/awowXAJ6XoeT:MHmmwpUykTnQIA/PN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW WriteConsoleOutputCharacterA EndUpdateResourceW InterlockedDecrement SetDefaultCommConfigW GetModuleHandleExW CreateDirectoryW GetComputerNameW FreeEnvironmentStringsA GetTickCount CreateNamedPipeW GetConsoleAliasesA TzSpecificLocalTimeToSystemTime GetVolumeInformationA LoadLibraryW GetLocaleInfoW FatalAppExitW HeapCreate ReadFile GetTimeZoneInformation SetLastError GetProcAddress ResetEvent OpenWaitableTimerA LoadLibraryA GetProcessWorkingSetSize LocalAlloc DnsHostnameToComputerNameA AddAtomW SetCurrentDirectoryW OpenJobObjectW DeviceIoControl VirtualProtect GetCurrentDirectoryA EnumDateFormatsW CompareStringA FindAtomW FileTimeToLocalFileTime EnumSystemLocalesA GetLocaleInfoA GetLastError HeapFree EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapAlloc Sleep HeapSize GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent RaiseException GetUserDefaultLCID IsValidLocale

user32

GetClassLongW

Name

.text

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

39.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kegoxeg

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yoyu

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.macava

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

3093ee9afd5b7d6917cad8f9ecfbabd6c925b5ad3279ecd74bf4fe60cadb5999

kernel32

user32

generic