9fdc07eb09ef8721066b9e2f6b502d3f

General

Target
9fdc07eb09ef8721066b9e2f6b502d3f
Size 461KB
Sample240216-jz262aed94
SHA256 799681dad39fec9ad2392e981960c35227bd6a7f225e4c83d4b8b71ab68afbfc
MD5 9fdc07eb09ef8721066b9e2f6b502d3f
SHA1 89555c1f4629e9bc14472ab63d3dc5f917c6b5f8
SHA512 9dd4e55497232a2d33a3de9cc7a7080bcbcaf3116803a4534eece1c0a3aa44583c25b0ecd58d8bbc27a8c74b4d914903d75d961abc1ef629c0cbef7f5bd8ae6e
SSDEEP 12288:bQOKVv21SX84EgIwC4haX3FPik0aDJwhQeD+qawoO:bQDvt84EgZdUXoVqt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fdc07eb09ef8721066b9e2f6b502d3f

File Explorer

9fdc07eb09ef8721066b9e2f6b502d3f

.exe 461KB

9fdc07eb09ef8721066b9e2f6b502d3f

IMPHASH dceae8ee937ee18f560a0f6c135be8cf
SHA256 799681dad39fec9ad2392e981960c35227bd6a7f225e4c83d4b8b71ab68afbfc
MD5 9fdc07eb09ef8721066b9e2f6b502d3f
SHA1 89555c1f4629e9bc14472ab63d3dc5f917c6b5f8
SHA512 9dd4e55497232a2d33a3de9cc7a7080bcbcaf3116803a4534eece1c0a3aa44583c25b0ecd58d8bbc27a8c74b4d914903d75d961abc1ef629c0cbef7f5bd8ae6e
SSDEEP 12288:bQOKVv21SX84EgIwC4haX3FPik0aDJwhQeD+qawoO:bQDvt84EgZdUXoVqt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

345030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\miyi miriwu.pdb

kernel32

LeaveCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InitializeSListHead SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeW ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameW ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA IsWow64Process UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind GetLastError HeapReAlloc HeapAlloc GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer HeapCreate VirtualFree VirtualAlloc ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

9fdc07eb09ef8721066b9e2f6b502d3f

kernel32

user32

generic