9a022cd7d48f7e777ad0ec7059ed87a9b164c8a3a320dd56997c24b2965c268a

General

Target
9a022cd7d48f7e777ad0ec7059ed87a9b164c8a3a320dd56997c24b2965c268a
Size 417KB
Sample240502-ppwjdsgh7z
SHA256 9a022cd7d48f7e777ad0ec7059ed87a9b164c8a3a320dd56997c24b2965c268a
MD5 bbbc79ee1b0672cd2665c3f802011342
SHA1 390aa088d29f52465510484d3ba13f162a52f89d
SHA512 ec54241335e15f6f2ae68313f36d5519fa6f5d0a18c1db75d7ac9cec1669c346714bb214bf7881ad1d60294c9552049c064cdeb59dddde143188479c257b3af6
SSDEEP 6144:TsQZtQVdkUWmbTolPUtBoJEqPzwnba+IgE3YyHITXbL3DOceZFMV:Ts+tQVbkKtAEckbaeAhIrDIFMV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a022cd7d48f7e777ad0ec7059ed87a9b164c8a3a320dd56997c24b2965c268a

File Explorer

9a022cd7d48f7e777ad0ec7059ed87a9b164c8a3a320dd56997c24b2965c268a

.exe 417KB

9a022cd7d48f7e777ad0ec7059ed87a9b164c8a3a320dd56997c24b2965c268a

IMPHASH 8c22317ce05558d5841ed29ad4374b78
SHA256 9a022cd7d48f7e777ad0ec7059ed87a9b164c8a3a320dd56997c24b2965c268a
MD5 bbbc79ee1b0672cd2665c3f802011342
SHA1 390aa088d29f52465510484d3ba13f162a52f89d
SHA512 ec54241335e15f6f2ae68313f36d5519fa6f5d0a18c1db75d7ac9cec1669c346714bb214bf7881ad1d60294c9552049c064cdeb59dddde143188479c257b3af6
SSDEEP 6144:TsQZtQVdkUWmbTolPUtBoJEqPzwnba+IgE3YyHITXbL3DOceZFMV:Ts+tQVbkKtAEckbaeAhIrDIFMV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17163

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zokom.pdb

kernel32

CommConfigDialogA LoadLibraryExW InterlockedIncrement InterlockedDecrement BackupSeek GetModuleHandleW GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW TerminateThread GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetFullPathNameA GetConsoleOutputCP GetLastError SetLastError GetProcAddress CreateHardLinkW CreateEventW AddAtomA GlobalFindAtomW GlobalUnWire BuildCommDCBA VirtualProtect GetVersionExA ReadConsoleInputW GetCurrentProcessId SetFileAttributesW GetVolumeInformationW GetTempPathW GetComputerNameA EncodePointer DecodePointer ReadFile GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc ExitProcess GetModuleHandleExW WideCharToMultiByte HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle GetCurrentThreadId GetProcessHeap WriteFile QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW

gdi32

DeleteMetaFile

Sharing

General

Malware Config

Signatures

File Explorer

9a022cd7d48f7e777ad0ec7059ed87a9b164c8a3a320dd56997c24b2965c268a

kernel32

gdi32

generic