a9b14697b3b40f1c18fe966196728673

General

Target
a9b14697b3b40f1c18fe966196728673
Size 10.9MB
Sample240227-vjkslaee83
SHA256 fff317394bef4b1ab9b56e4800937ba2fae0a86246655b4a965bfc3bb69db40d
MD5 a9b14697b3b40f1c18fe966196728673
SHA1 ecf099f8f08d74e7cf1ef00f05a41a656bb2cfaf
SHA512 0933a354a8532664e8d61b8a8a779b9cb64c25ff686f1be3b0528207cb7df46eb76dafef3bf7801b3a055e0b7ae4aecda7d17704338892cc6758b1ba07b93ee0
SSDEEP 24576:wcmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmf:w
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9b14697b3b40f1c18fe966196728673

File Explorer

a9b14697b3b40f1c18fe966196728673

.exe 10.9MB

a9b14697b3b40f1c18fe966196728673

IMPHASH 5cf8ab4c07bd680cc3ad63fcf1e8b997
SHA256 fff317394bef4b1ab9b56e4800937ba2fae0a86246655b4a965bfc3bb69db40d
MD5 a9b14697b3b40f1c18fe966196728673
SHA1 ecf099f8f08d74e7cf1ef00f05a41a656bb2cfaf
SHA512 0933a354a8532664e8d61b8a8a779b9cb64c25ff686f1be3b0528207cb7df46eb76dafef3bf7801b3a055e0b7ae4aecda7d17704338892cc6758b1ba07b93ee0
SSDEEP 24576:wcmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmxmf:w
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

84502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nin\sukunuwus.pdb

kernel32

GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA VerifyVersionInfoW CreateFileW WritePrivateProfileSectionA GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryW VirtualFree SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI GetConsoleCP LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputA GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameA SetCriticalSectionSpinCount GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle LoadLibraryA GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

a9b14697b3b40f1c18fe966196728673

kernel32

user32

generic