9bb0954a71edfd122a5e2b14850702a453fdbf5a632265337c0aee558bdd3e40

Resubmissions

26/04/2024, 07:51

240426-jp4xwacb3v10

26/04/2024, 07:51

26/04/2024, 07:51

26/04/2024, 07:51

26/04/2024, 07:51

25/04/2024, 12:59

Sharing

Copy URL Twitter E-mail

General

Target
9bb0954a71edfd122a5e2b14850702a453fdbf5a632265337c0aee558bdd3e40
Size 1.9MB
Sample240426-jp31kscb53
SHA256 9bb0954a71edfd122a5e2b14850702a453fdbf5a632265337c0aee558bdd3e40
MD5 1457ef90efde49a7ee83080ce051d6f7
SHA1 8ca6d983fe2997fa7009458383b84e0d1edeb279
SHA512 582628e02510812e0ed06cc05a1bfb98e96f019935efb71d23dd94745a0c5db12771bf0c81579dd7ad4f44b90e7192b95d5d2ed4a6649adc00b486c28df643d0
SSDEEP 49152:Vbe6aahW7iaBUHvG+vxz90ChL0WF+UIGDDS/NL:vaaA7iYb+dtQWFZvSR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bb0954a71edfd122a5e2b14850702a453fdbf5a632265337c0aee558bdd3e40

File Explorer

9bb0954a71edfd122a5e2b14850702a453fdbf5a632265337c0aee558bdd3e40

.exe 1.9MB

9bb0954a71edfd122a5e2b14850702a453fdbf5a632265337c0aee558bdd3e40

IMPHASH fc8307445fea4c444664e5adfe4d2cfc
SHA256 9bb0954a71edfd122a5e2b14850702a453fdbf5a632265337c0aee558bdd3e40
MD5 1457ef90efde49a7ee83080ce051d6f7
SHA1 8ca6d983fe2997fa7009458383b84e0d1edeb279
SHA512 582628e02510812e0ed06cc05a1bfb98e96f019935efb71d23dd94745a0c5db12771bf0c81579dd7ad4f44b90e7192b95d5d2ed4a6649adc00b486c28df643d0
SSDEEP 49152:Vbe6aahW7iaBUHvG+vxz90ChL0WF+UIGDDS/NL:vaaA7iYb+dtQWFZvSR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW CreateFileA WriteConsoleInputW WritePrivateProfileStructA DeleteVolumeMountPointA ReadConsoleA InterlockedDecrement ZombifyActCtx SetDefaultCommConfigW CreateJobObjectW GetProfileSectionA GetComputerNameW MoveFileWithProgressA FindNextVolumeMountPointA CreateActCtxW GlobalAlloc TerminateThread ReadConsoleInputA InterlockedPopEntrySList GlobalFlags WriteConsoleW GetTimeZoneInformation GetNamedPipeHandleStateW GetLargestConsoleWindowSize GetConsoleOutputCP FindFirstFileA GetLastError GetProcAddress PeekConsoleInputW VerLanguageNameA GetPrivateProfileStringA SetFileApisToOEM OpenWaitableTimerA LoadLibraryA GetConsoleScreenBufferInfo IsWow64Process BuildCommDCBAndTimeoutsW GetNumberFormatW FoldStringA GlobalFindAtomW GetModuleHandleA GetProcessShutdownParameters OpenFileMappingW GetCPInfoExA LocalSize GetWindowsDirectoryW CloseHandle SetStdHandle FlushFileBuffers WideCharToMultiByte InterlockedIncrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent HeapCreate HeapSize GetModuleHandleW ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode CreateFileW

user32

CharUpperW CharToOemBuffA

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

9bb0954a71edfd122a5e2b14850702a453fdbf5a632265337c0aee558bdd3e40

kernel32

user32

generic