9eb9ce6fa80e866fccb277b400033685

General

Target
9eb9ce6fa80e866fccb277b400033685
Size 517KB
Sample240215-2ch4raba38
SHA256 d66c034380086e36912b8865f41b0dc3ea540a014ec42579ac9645dca5ae4858
MD5 9eb9ce6fa80e866fccb277b400033685
SHA1 4f6fa448454b581d6c8e7aa6ed3ef72e66062bf8
SHA512 16bea65d58a3f968110411b067ea7cbdb4cab5ebd1edbf9d94428fed1bc0e40741c799b0c4d6ddd9de3e87f18322416924f03478a6041f8566f64f7bded9e760
SSDEEP 12288:Eg8tD+p1h79i/DdVedE5fJD7uwkIPveEosOgGSgSkrcq3qilOL:EgwVDdcE5fJheEovgYSkwq3qis
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9eb9ce6fa80e866fccb277b400033685

File Explorer

9eb9ce6fa80e866fccb277b400033685

.exe 517KB

9eb9ce6fa80e866fccb277b400033685

IMPHASH bf08a978649b718b66012803a6d17e5b
SHA256 d66c034380086e36912b8865f41b0dc3ea540a014ec42579ac9645dca5ae4858
MD5 9eb9ce6fa80e866fccb277b400033685
SHA1 4f6fa448454b581d6c8e7aa6ed3ef72e66062bf8
SHA512 16bea65d58a3f968110411b067ea7cbdb4cab5ebd1edbf9d94428fed1bc0e40741c799b0c4d6ddd9de3e87f18322416924f03478a6041f8566f64f7bded9e760
SSDEEP 12288:Eg8tD+p1h79i/DdVedE5fJD7uwkIPveEosOgGSgSkrcq3qilOL:EgwVDdcE5fJheEovgYSkwq3qis
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8181

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\thzag\vnxjep\verg\8e8fe329bdeb4d5797eb4d69aa9fafe3\wizqzy\xukybarl\Release\xukybarl.pdb

kernel32

GetStdHandle GetCommandLineW WriteFile GetLastError HeapAlloc HeapFree GetProcessHeap WaitForSingleObject GetCurrentProcess ExitProcess GetExitCodeProcess CreateProcessW GetWindowsDirectoryW IsWow64Process FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryExW LoadLibraryA LocalFree GetBinaryTypeW lstrlenW WideCharToMultiByte EnumTimeFormatsW GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess InterlockedPushEntrySList InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer RaiseException GetModuleFileNameW GetModuleFileNameA MultiByteToWideChar GetModuleHandleExW GetCommandLineA GetACP GetCurrentThread FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW OutputDebugStringA OutputDebugStringW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW SetConsoleCtrlHandler HeapSize DecodePointer

user32

MessageBoxW LoadStringW

ole32

OleInitialize OleUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

9eb9ce6fa80e866fccb277b400033685

kernel32

user32

ole32

generic