c9104523c9eff43bca5b1139e2399dca28a06efe78ea10667f57b4f0efea5f9a

General

Target
c9104523c9eff43bca5b1139e2399dca28a06efe78ea10667f57b4f0efea5f9a
Size 412KB
Sample240607-zterjsdh73
SHA256 c9104523c9eff43bca5b1139e2399dca28a06efe78ea10667f57b4f0efea5f9a
MD5 0ec5c98c868afea5bcfca77bff91778c
SHA1 1965b9a8203b15fffa866a9f8d9bf79ac502cbcc
SHA512 75a159a78af77a4720d4ae4d1f84913786fab237516f02c661f1eadedbd1cdc09f62576dfadf8c98ab56af071f9505c18c49a6d1e23260fd023a524dbfe93456
SSDEEP 6144:KJmLCFAs5KCwAG+4KUlq4X/FIiKp0oPahAvFyul:/mFAA6AG+JG1/O50oP+Avwu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9104523c9eff43bca5b1139e2399dca28a06efe78ea10667f57b4f0efea5f9a

File Explorer

c9104523c9eff43bca5b1139e2399dca28a06efe78ea10667f57b4f0efea5f9a

.exe 412KB

c9104523c9eff43bca5b1139e2399dca28a06efe78ea10667f57b4f0efea5f9a

IMPHASH a2b57cee2ef92fccd3022627dbc36256
SHA256 c9104523c9eff43bca5b1139e2399dca28a06efe78ea10667f57b4f0efea5f9a
MD5 0ec5c98c868afea5bcfca77bff91778c
SHA1 1965b9a8203b15fffa866a9f8d9bf79ac502cbcc
SHA512 75a159a78af77a4720d4ae4d1f84913786fab237516f02c661f1eadedbd1cdc09f62576dfadf8c98ab56af071f9505c18c49a6d1e23260fd023a524dbfe93456
SSDEEP 6144:KJmLCFAs5KCwAG+4KUlq4X/FIiKp0oPahAvFyul:/mFAA6AG+JG1/O50oP+Avwu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA FormatMessageA LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW lstrcpynW GetTimeFormatW FindNextVolumeW SetTimeZoneInformation FileTimeToSystemTime CompareStringW RaiseException GetStringTypeExA CreateJobObjectA GetConsoleAliasesW EnumCalendarInfoW SetLastError GetProcAddress SetVolumeLabelW VerLanguageNameW LoadLibraryA LocalAlloc GetModuleFileNameA SetConsoleCursorInfo SetConsoleTitleW lstrcatW GetProcessAffinityMask BuildCommDCBA PurgeComm EnumDateFormatsW DeleteCriticalSection DeleteAtom OpenFileMappingA EnumCalendarInfoExA SetThreadLocale InterlockedIncrement GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

advapi32

SetThreadToken

Sharing

General

Malware Config

Signatures

File Explorer

c9104523c9eff43bca5b1139e2399dca28a06efe78ea10667f57b4f0efea5f9a

kernel32

user32

advapi32

generic