9954c8187bcb9e068b2d1e901cdfb376

General

Target
9954c8187bcb9e068b2d1e901cdfb376
Size 429KB
Sample240213-nts4dsaa67
SHA256 45195709e932995d3bf94c166516c3761a68db5377ee73a8ebeedf90f3f139ac
MD5 9954c8187bcb9e068b2d1e901cdfb376
SHA1 ca1d6245fbf34aa66b59d60964972a42874241b8
SHA512 b6abdec11b99a4bd3bd1dd15f054880a3d5cc48d14ae3c41a7e21273bd6d0aaa5e7edb251fdaa8f2e6bb17e50c6dd4f7e13596c9a63ff6a7e69e386340bbf034
SSDEEP 6144:Cy7Zle2Oke2iif8dq+OrzY0LFmCWr3BL76UCClm3WzmnWzpOKAbxhDkX5gSsI5/:4xxthOrbIDL+Uxlm3SmnKpluhmg7c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9954c8187bcb9e068b2d1e901cdfb376

File Explorer

9954c8187bcb9e068b2d1e901cdfb376

.exe 429KB

9954c8187bcb9e068b2d1e901cdfb376

IMPHASH 8e0bb80ced2d421c88737de82cded0ea
SHA256 45195709e932995d3bf94c166516c3761a68db5377ee73a8ebeedf90f3f139ac
MD5 9954c8187bcb9e068b2d1e901cdfb376
SHA1 ca1d6245fbf34aa66b59d60964972a42874241b8
SHA512 b6abdec11b99a4bd3bd1dd15f054880a3d5cc48d14ae3c41a7e21273bd6d0aaa5e7edb251fdaa8f2e6bb17e50c6dd4f7e13596c9a63ff6a7e69e386340bbf034
SSDEEP 6144:Cy7Zle2Oke2iif8dq+OrzY0LFmCWr3BL76UCClm3WzmnWzpOKAbxhDkX5gSsI5/:4xxthOrbIDL+Uxlm3SmnKpluhmg7c
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sim roz\fimusoya-zetimil\wivot\sezovet\18-civufey.pdb

kernel32

lstrlenA GetConsoleAliasesLengthW GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement SetMailslotInfo GetSystemWindowsDirectoryW SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetConsoleAliasesLengthA GetCommandLineA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW GetFileAttributesW LocalReAlloc WriteConsoleW HeapQueryInformation ReadFile CreateTimerQueue GetTimeZoneInformation InterlockedExchange ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW EnumDateFormatsExA EnterCriticalSection ResetEvent GetLocalTime LoadLibraryA OpenMutexA IsWow64Process GlobalGetAtomNameW GetCurrentConsoleFont GetOEMCP GetModuleHandleA GetConsoleTitleW BuildCommDCBA VirtualProtect GetFileAttributesExW FindFirstVolumeA ReleaseMutex GetVersion GetCurrentProcessId GetConsoleProcessList EnumCalendarInfoExA CreateThread GetModuleFileNameW GetSystemDefaultLangID CreateFileA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoA RaiseException RtlUnwind GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

9954c8187bcb9e068b2d1e901cdfb376

kernel32

user32

generic