b9603bc9734cc8f5a19cea4c717970ab

General

Target
b9603bc9734cc8f5a19cea4c717970ab
Size 602KB
Sample240307-w4fj2sbd4x
SHA256 ee868c21339f7b0d6c1fcbe27769b583d3a17b11dc5f39862defef456a4a8df5
MD5 b9603bc9734cc8f5a19cea4c717970ab
SHA1 33675c412f39535a1e39c4d4d900ff5b224aed9e
SHA512 25bc956decaada8d3d0ed1739644c56dc2f2272904334c6638b4e6fa0312eb58de474e46328059430e6e0b06788d87422dbf667ac22eed7e0dee836eadcffdff
SSDEEP 12288:3uBqDLOHBcaqQOftyYMRxFP0/6ySMyQlA/P5391ak5mT6iq3ekVhtG9C5Gxaq:iqD9aqQOLMrqXSwaHNGzZq3eko9H1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9603bc9734cc8f5a19cea4c717970ab

File Explorer

b9603bc9734cc8f5a19cea4c717970ab

.exe 602KB

b9603bc9734cc8f5a19cea4c717970ab

IMPHASH 1f895b3a0f59500cbbe993bee47d382a
SHA256 ee868c21339f7b0d6c1fcbe27769b583d3a17b11dc5f39862defef456a4a8df5
MD5 b9603bc9734cc8f5a19cea4c717970ab
SHA1 33675c412f39535a1e39c4d4d900ff5b224aed9e
SHA512 25bc956decaada8d3d0ed1739644c56dc2f2272904334c6638b4e6fa0312eb58de474e46328059430e6e0b06788d87422dbf667ac22eed7e0dee836eadcffdff
SSDEEP 12288:3uBqDLOHBcaqQOftyYMRxFP0/6ySMyQlA/P5391ak5mT6iq3ekVhtG9C5Gxaq:iqD9aqQOLMrqXSwaHNGzZq3eko9H1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bokehikuci\zuj.pdb

kernel32

WriteConsoleOutputCharacterW lstrlenA LocalCompact UpdateResourceA MoveFileExW InterlockedDecrement GetCurrentProcess GetUserDefaultLCID SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW SetEvent GetSystemDefaultLCID IsBadReadPtr GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW ReadConsoleOutputA WriteFile CreateActCtxW InitializeCriticalSection GetVolumePathNameW ActivateActCtx FindResourceExA GetConsoleCP GlobalAlloc GetSystemWindowsDirectoryA InterlockedPopEntrySList GetFileAttributesA DnsHostnameToComputerNameW lstrcpynW GetConsoleAliasW WriteConsoleW CreateActCtxA GetCPInfoExW GetLastError GetLongPathNameW GetProcAddress EnumDateFormatsExA EnterCriticalSection GlobalGetAtomNameA LoadLibraryA GlobalGetAtomNameW WaitForMultipleObjects SetSystemTime SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA lstrcatW EraseTape CancelTimerQueueTimer BuildCommDCBA VirtualProtect PeekConsoleInputA SetCalendarInfoA EndUpdateResourceA ReadConsoleInputW FindFirstVolumeW GetPrivateProfileSectionW AreFileApisANSI VerifyVersionInfoA GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

GetAltTabInfoW RealGetWindowClassA

advapi32

BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

b9603bc9734cc8f5a19cea4c717970ab

kernel32

user32

advapi32

generic