f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3

General

Target
f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3
Size 261KB
Sample240503-2knzzaba95
SHA256 f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3
MD5 d4a824b455f581031c959f4431977e94
SHA1 85dd7d196e585c1c1d2d28ce4bbe4647da079588
SHA512 3e377db899365a4f48bbab1e97ccceaf6284551616ad8f1bf2af65478d28500ce4b1a1cd798968fc13934bf324e1aaecd5223a6a59cf035f4145bf3baf2ccb07
SSDEEP 3072:jfiqHnFC8bq8sb+UAi21LiFOMQy5BJ6pLg1T/dO:jfiqHnFDg+xfpmJrt/w
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3

File Explorer

f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3

.exe 261KB

f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3

IMPHASH be37cfa8808e82b62b6ce7f603a1d7f3
SHA256 f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3
MD5 d4a824b455f581031c959f4431977e94
SHA1 85dd7d196e585c1c1d2d28ce4bbe4647da079588
SHA512 3e377db899365a4f48bbab1e97ccceaf6284551616ad8f1bf2af65478d28500ce4b1a1cd798968fc13934bf324e1aaecd5223a6a59cf035f4145bf3baf2ccb07
SSDEEP 3072:jfiqHnFC8bq8sb+UAi21LiFOMQy5BJ6pLg1T/dO:jfiqHnFDg+xfpmJrt/w
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW GetModuleFileNameW SetConsoleTitleA SetCurrentDirectoryA FindFirstFileExA EnumCalendarInfoW SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetConsoleCtrlHandler HeapWalk FindAtomA WaitForMultipleObjects EnumDateFormatsW GetSystemTime GetCurrentDirectoryW GetLocaleInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3

kernel32

advapi32

generic