9ba704f30ff5e7412d18190208795539

General

Target
9ba704f30ff5e7412d18190208795539
Size 573KB
Sample240214-pgmxaabb83
SHA256 d16d9899f08324ee34f1722963a675e670558e0043fe5fbe266ba84a0203ef7f
MD5 9ba704f30ff5e7412d18190208795539
SHA1 c7f334ff8bd076c6c5006f57e8c4304224190039
SHA512 b408124f91fc5bad091cf82eeb02be7a96592387cc98ddb44dc8af51f979d85c6fb6052a4acae22ce0b48e4c90a015394b534fd0dbe0723d6d179e58b8d8475a
SSDEEP 12288:F/9subCXb9o39VHqtmoYgtUS724K3/eaX59Y:Yk0ujsUWK21
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ba704f30ff5e7412d18190208795539

File Explorer

9ba704f30ff5e7412d18190208795539

.exe 573KB

9ba704f30ff5e7412d18190208795539

IMPHASH 80892f18aacf6a3ec193623c3a9507f4
SHA256 d16d9899f08324ee34f1722963a675e670558e0043fe5fbe266ba84a0203ef7f
MD5 9ba704f30ff5e7412d18190208795539
SHA1 c7f334ff8bd076c6c5006f57e8c4304224190039
SHA512 b408124f91fc5bad091cf82eeb02be7a96592387cc98ddb44dc8af51f979d85c6fb6052a4acae22ce0b48e4c90a015394b534fd0dbe0723d6d179e58b8d8475a
SSDEEP 12288:F/9subCXb9o39VHqtmoYgtUS724K3/eaX59Y:Yk0ujsUWK21
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16341

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hedas rafavufubenamo\c.pdb

kernel32

HeapReAlloc SetLocalTime EndUpdateResourceW InterlockedIncrement InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW GetEnvironmentStringsW GetUserDefaultLCID WaitForSingleObject AddConsoleAliasW SetVolumeMountPointW EnumCalendarInfoExW ReadConsoleW WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc WriteConsoleOutputA GetVersionExW PulseEvent lstrcpynW FindNextVolumeW VerifyVersionInfoA HeapQueryInformation GetModuleFileNameW GetACP LCMapStringA GetProcAddress GetComputerNameExW VerLanguageNameA CreateTimerQueueTimer FreeUserPhysicalPages GetDefaultCommConfigA GetModuleHandleA QueueUserWorkItem GetConsoleTitleW VirtualProtect PeekConsoleInputA GetCPInfoExA ReadConsoleInputW CreateThread LeaveCriticalSection GetCommandLineW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

user32

RealGetWindowClassW

Sharing

General

Malware Config

Signatures

File Explorer

9ba704f30ff5e7412d18190208795539

kernel32

user32

generic