9fb615daac3943f947eb3e58ba0ad619[.]exe

General

Target
9fb615daac3943f947eb3e58ba0ad619.exe
Size 490KB
Sample240412-klez1scb3x
SHA256 9237495e0ce63c60224091d7e83285b745272e3bd276efe2dd0153c8dcd67f29
MD5 9fb615daac3943f947eb3e58ba0ad619
SHA1 8a697656564befa506cab0d2b9c83bd1c4ea0957
SHA512 67d4a279001045a4949625affafed862ed09481eb9c5ba71e212e5a4e4ebe6750bd996f9e27ec8a01b124d46c83297201e45a19e9f03f5c0476eded480932b13
SSDEEP 6144:DyQs5pHvN1W10cBdjRusnpfBOL22g0rza6whsRwrmXFaMHw/ru5yonl:1ypHvbIdjBfECH0k1rmXMbUvl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fb615daac3943f947eb3e58ba0ad619.exe

File Explorer

9fb615daac3943f947eb3e58ba0ad619.exe

.exe 490KB

9fb615daac3943f947eb3e58ba0ad619.exe

IMPHASH e03af4c47837fbfefcd192e4bab71da3
SHA256 9237495e0ce63c60224091d7e83285b745272e3bd276efe2dd0153c8dcd67f29
MD5 9fb615daac3943f947eb3e58ba0ad619
SHA1 8a697656564befa506cab0d2b9c83bd1c4ea0957
SHA512 67d4a279001045a4949625affafed862ed09481eb9c5ba71e212e5a4e4ebe6750bd996f9e27ec8a01b124d46c83297201e45a19e9f03f5c0476eded480932b13
SSDEEP 6144:DyQs5pHvN1W10cBdjRusnpfBOL22g0rza6whsRwrmXFaMHw/ru5yonl:1ypHvbIdjBfECH0k1rmXMbUvl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA HeapReAlloc EnumCalendarInfoA TryEnterCriticalSection VirtualQuery GetConsoleAliasExesLengthA SetDefaultCommConfigW HeapFree UnlockFile FreeEnvironmentStringsA GetModuleHandleW FindNextVolumeMountPointA GetConsoleAliasesLengthA GetDateFormatA SetCommState GetConsoleCP GlobalAlloc LoadLibraryW GetLocaleInfoW IsBadWritePtr GetAtomNameW GetModuleFileNameW SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW GetProcAddress FindVolumeMountPointClose GetProcessHeaps LoadLibraryA CreatePipe SetConsoleTitleW SetCalendarInfoA CloseHandle CreateFileW GetLastError GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer HeapAlloc IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind HeapSize SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW FlushFileBuffers

user32

LoadIconW

ole32

CoTaskMemFree

Sharing