9114b4f1d15e6460424b18bf6e5292c18980879b9d3fe4f4370830a33895f27e

General

Target
9114b4f1d15e6460424b18bf6e5292c18980879b9d3fe4f4370830a33895f27e
Size 206KB
Sample240217-egfsvsae9v
SHA256 9114b4f1d15e6460424b18bf6e5292c18980879b9d3fe4f4370830a33895f27e
MD5 2ef0672870d7070646c1ad9e5f86adee
SHA1 90ede6f69eeee49f8ae456039025557508a909b0
SHA512 bbafcee8353bc24d1e53118934c2536dee94c5444d4a10cd1aa3cf38097685b615a91d169451b62af8905b918bef1f53d4b5fa041e48f6eadf32459a504cbbf0
SSDEEP 3072:ONcaM1j1m/5CrL7UdfaYOfFiL2L6FQbpMkoDL/jb/N2NO6Pou2:ONcft8UoaY0kAzpLoDLPOOK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9114b4f1d15e6460424b18bf6e5292c18980879b9d3fe4f4370830a33895f27e

File Explorer

9114b4f1d15e6460424b18bf6e5292c18980879b9d3fe4f4370830a33895f27e

.exe 206KB

9114b4f1d15e6460424b18bf6e5292c18980879b9d3fe4f4370830a33895f27e

IMPHASH ab4b20db27905f9ef383a4e0564b2b9d
SHA256 9114b4f1d15e6460424b18bf6e5292c18980879b9d3fe4f4370830a33895f27e
MD5 2ef0672870d7070646c1ad9e5f86adee
SHA1 90ede6f69eeee49f8ae456039025557508a909b0
SHA512 bbafcee8353bc24d1e53118934c2536dee94c5444d4a10cd1aa3cf38097685b615a91d169451b62af8905b918bef1f53d4b5fa041e48f6eadf32459a504cbbf0
SSDEEP 3072:ONcaM1j1m/5CrL7UdfaYOfFiL2L6FQbpMkoDL/jb/N2NO6Pou2:ONcft8UoaY0kAzpLoDLPOOK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5851

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc SystemTimeToFileTime SetEvent GetCommProperties CreateNamedPipeW GetConsoleAliasesLengthA WriteFile TzSpecificLocalTimeToSystemTime LoadLibraryW GetLocaleInfoW AssignProcessToJobObject ReplaceFileA FlushFileBuffers CreateDirectoryA GetConsoleAliasesW WriteConsoleOutputCharacterW SetLastError lstrcmpiA GetProcAddress LoadLibraryA GetProcessWorkingSetSize LocalAlloc AddAtomW EraseTape FreeEnvironmentStringsW VirtualProtect EnumDateFormatsW FatalAppExitA SetStdHandle WriteConsoleW GetCurrentDirectoryW GetComputerNameA CloseHandle IsProcessorFeaturePresent EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy Sleep HeapSize EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc RtlUnwind HeapFree LCMapStringW MultiByteToWideChar GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode SetFilePointer CreateFileW

user32

GetClassLongW

advapi32

AccessCheckByType

ole32

CreateDataAdviseHolder

Sharing

General

Malware Config

Signatures

File Explorer

9114b4f1d15e6460424b18bf6e5292c18980879b9d3fe4f4370830a33895f27e

kernel32

user32

advapi32

ole32

generic