466a5771af26f4655cb6cfcf5616aa2acc11c58226bf440a7d0bb29f3a88968c[.]zip

General

Target
466a5771af26f4655cb6cfcf5616aa2acc11c58226bf440a7d0bb29f3a88968c.zip
Size 170KB
Sample240402-l8kdpaed5y
SHA256 524822a57adbb018c4aad349b4ff476993e18bc737ca0b7bd41c18093de019c0
MD5 9817697bf62b4ea3a15bfd9a1632cea2
SHA1 3f110baf41b1ad490f0376095881d78696fc907f
SHA512 00e50fd96982eebe3295963f4c46137bf1cbb22982f127ca171a12dc488771fb7b8a368bec525f61bdb309209f390f4bfb1ab13991ade99496115fb7cf2b2cfc
SSDEEP 3072:kjKwincI3cFYrf5hQaGXwt9H8WPS5YhsEXH2S1KvuiM6hTZKJHKeE1kg:kmwincEcFOhhoXwt9BPSyhlbEuiM6iJC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/466a5771af26f4655cb6cfcf5616aa2acc11c58226bf440a7d0bb29f3a88968c.exe

File Explorer

466a5771af26f4655cb6cfcf5616aa2acc11c58226bf440a7d0bb29f3a88968c.zip

.zip 170KB
466a5771af26f4655cb6cfcf5616aa2acc11c58226bf440a7d0bb29f3a88968c.exe

.exe 317KB

466a5771af26f4655cb6cfcf5616aa2acc11c58226bf440a7d0bb29f3a88968c.zip

SHA256 524822a57adbb018c4aad349b4ff476993e18bc737ca0b7bd41c18093de019c0
MD5 9817697bf62b4ea3a15bfd9a1632cea2
SHA1 3f110baf41b1ad490f0376095881d78696fc907f
SHA512 00e50fd96982eebe3295963f4c46137bf1cbb22982f127ca171a12dc488771fb7b8a368bec525f61bdb309209f390f4bfb1ab13991ade99496115fb7cf2b2cfc
SSDEEP 3072:kjKwincI3cFYrf5hQaGXwt9H8WPS5YhsEXH2S1KvuiM6hTZKJHKeE1kg:kmwincEcFOhhoXwt9BPSyhlbEuiM6iJC
MD5 SHA1 SHA512 SSDEEP

Password

infected

466a5771af26f4655cb6cfcf5616aa2acc11c58226bf440a7d0bb29f3a88968c.exe

IMPHASH 6bc846f0c462f5616e82c17e0fe55c5a
SHA256 466a5771af26f4655cb6cfcf5616aa2acc11c58226bf440a7d0bb29f3a88968c
MD5 8cc6aec77fca66fc44286a1519bae1ee
SHA1 35b395341b0b103bf511d653b05921dc89370a65
SHA512 de7e960bd1204ef301828d970764e2161cef622d529db3f8f3b001656ed01dc9d890b6e9ef385ebf0f57187fb9c62c064b8804d800a685dec9fa715fcfe3bd51
SSDEEP 6144:03BH8F8MzN7YBmGXZrNcyzpulx2x1dmv56:0xH8OMzWBLZ+yzQ3srW4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

1

Major OS version

5

Entry point

38099

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA CreateFileA FindFirstFileW SetLocaleInfoA WriteConsoleInputW DeleteVolumeMountPointA VerSetConditionMask InterlockedDecrement SetDefaultCommConfigW InitializeSListHead CreateJobObjectW GetProfileSectionA MoveFileWithProgressA ReadConsoleW GetCommandLineA CreateActCtxW GlobalAlloc TerminateThread ReadConsoleInputA SetConsoleCP GlobalFlags WritePrivateProfileStructW WriteConsoleW GetTimeZoneInformation FindNextVolumeMountPointW GetNamedPipeHandleStateW GetLargestConsoleWindowSize ReleaseActCtx GetCPInfoExW GetLastError GetProcAddress PeekConsoleInputW VerLanguageNameA IsValidCodePage SearchPathA SetFileApisToOEM LoadLibraryA OpenWaitableTimerW GetConsoleScreenBufferInfo IsWow64Process BuildCommDCBAndTimeoutsW GetNumberFormatW FoldStringA GlobalFindAtomW GetModuleHandleA OpenFileMappingW SetProcessShutdownParameters LocalSize GetWindowsDirectoryW GlobalReAlloc ExpandEnvironmentStringsW FlushFileBuffers SetStdHandle LoadLibraryW WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent GetACP GetOEMCP TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSize SetFilePointer CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode CreateFileW

user32

CharToOemBuffW CharUpperW

Sharing