c9b088d954f9292346595b6c472d9a08fcd42a939286f30bd6dd4dc4069c6bf8[.]exe

General

Target
c9b088d954f9292346595b6c472d9a08fcd42a939286f30bd6dd4dc4069c6bf8.exe
Size 526KB
Sample240520-blw4vsdb5t
SHA256 c9b088d954f9292346595b6c472d9a08fcd42a939286f30bd6dd4dc4069c6bf8
MD5 3b51a1d5264413862f4692212ee4d4ba
SHA1 569ef139001af3477e4d50d5c566ab0f065c2089
SHA512 004426b1a00e42faec499bd16c370dcacd27c0e7f32168f1b0f54ba703767506ab8ee56ede260ee1ae4e45b9951c9959a85dc2094f6b2e5582c5c9879dc8e564
SSDEEP 12288:CfMjGqNc08m5Gfjx2Blk2dkCWnCJqHe8fLtpZq8:JGSLCcvkGWns/8jtq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9b088d954f9292346595b6c472d9a08fcd42a939286f30bd6dd4dc4069c6bf8.exe

File Explorer

c9b088d954f9292346595b6c472d9a08fcd42a939286f30bd6dd4dc4069c6bf8.exe

.exe 526KB

c9b088d954f9292346595b6c472d9a08fcd42a939286f30bd6dd4dc4069c6bf8.exe

IMPHASH 830b366092acf403d62b4e8c6ab00c2e
SHA256 c9b088d954f9292346595b6c472d9a08fcd42a939286f30bd6dd4dc4069c6bf8
MD5 3b51a1d5264413862f4692212ee4d4ba
SHA1 569ef139001af3477e4d50d5c566ab0f065c2089
SHA512 004426b1a00e42faec499bd16c370dcacd27c0e7f32168f1b0f54ba703767506ab8ee56ede260ee1ae4e45b9951c9959a85dc2094f6b2e5582c5c9879dc8e564
SSDEEP 12288:CfMjGqNc08m5Gfjx2Blk2dkCWnCJqHe8fLtpZq8:JGSLCcvkGWns/8jtq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

43810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

CryptDecrypt

kernel32

WaitForSingleObject CreateThread VirtualAlloc FreeConsole WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing