9eeb603bd91c5dec5aee5698780a425f

General

Target
9eeb603bd91c5dec5aee5698780a425f
Size 480KB
Sample240216-abvmlscg48
SHA256 9c27a51783f011da7fe9ad1b49b51721a045331ef664e4ecc962f9e15c3d43ed
MD5 9eeb603bd91c5dec5aee5698780a425f
SHA1 f0b21a8ccd3a121c53a865e9b75d0e1be4c8277e
SHA512 75ed448687351fbd3e687f062d8ca44c5e2b2a14cf2df71ec0af6dfb06c3fd46a0319e3d37ed841cc472e6eee04b4c5f738696ea041d6fb38f6213c9b23002bc
SSDEEP 12288:o64jOqOezW4SUAJEYvUSPPSxMYFHFBkF5cRaEUS:o64jOqOezZjAWYvUS/qFijQazS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9eeb603bd91c5dec5aee5698780a425f

File Explorer

9eeb603bd91c5dec5aee5698780a425f

.exe 480KB

9eeb603bd91c5dec5aee5698780a425f

IMPHASH eb816bdcb34642ae497d2f004d3c6914
SHA256 9c27a51783f011da7fe9ad1b49b51721a045331ef664e4ecc962f9e15c3d43ed
MD5 9eeb603bd91c5dec5aee5698780a425f
SHA1 f0b21a8ccd3a121c53a865e9b75d0e1be4c8277e
SHA512 75ed448687351fbd3e687f062d8ca44c5e2b2a14cf2df71ec0af6dfb06c3fd46a0319e3d37ed841cc472e6eee04b4c5f738696ea041d6fb38f6213c9b23002bc
SSDEEP 12288:o64jOqOezW4SUAJEYvUSPPSxMYFHFBkF5cRaEUS:o64jOqOezZjAWYvUS/qFijQazS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jitu\robamarufesoh.pdb

kernel32

lstrlenA EnumDateFormatsExW WriteConsoleOutputW InterlockedIncrement GetConsoleAliasA InterlockedDecrement WritePrivateProfileSectionA GetSystemWindowsDirectoryW GetEnvironmentStringsW GetUserDefaultLCID WriteConsoleInputA SetEvent GetConsoleAliasesLengthA GetConsoleTitleA CreateActCtxW InitializeCriticalSection GetConsoleCP GlobalAlloc DnsHostnameToComputerNameW lstrcpynW SetConsoleCursorPosition GetFileAttributesW HeapQueryInformation IsBadWritePtr GetCompressedFileSizeA GetSystemDirectoryA CreateFileW lstrcatA GetACP GetVolumePathNameA FlushFileBuffers VerifyVersionInfoW InterlockedExchange GetLastError GetProcAddress PeekConsoleInputW CreateTimerQueueTimer LocalLock GetConsoleDisplayMode EnterCriticalSection SetTimerQueueTimer GetLocalTime WriteConsoleA DeleteTimerQueue CreateTapePartition BeginUpdateResourceA GlobalGetAtomNameW WaitForMultipleObjects SetEnvironmentVariableA GetModuleFileNameA GetModuleHandleA FindFirstVolumeA EndUpdateResourceA ReadConsoleInputW GetCurrentProcessId AreFileApisANSI LCMapStringW FillConsoleOutputCharacterA GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException GetCPInfo GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

RealGetWindowClassA

advapi32

AdjustTokenGroups

Sharing

General

Malware Config

Signatures

File Explorer

9eeb603bd91c5dec5aee5698780a425f

kernel32

user32

advapi32

generic