ff543c0f90a10780ccd10622ac8a879f0fd04f4b502e1b82557cca36c6e011c0

General

Target
ff543c0f90a10780ccd10622ac8a879f0fd04f4b502e1b82557cca36c6e011c0
Size 261KB
Sample240607-zymb7ach61
SHA256 ff543c0f90a10780ccd10622ac8a879f0fd04f4b502e1b82557cca36c6e011c0
MD5 d6561b802864d99de2722a33c63681a5
SHA1 3eb9e10daa4251bcf2309b31fe04082b672383f5
SHA512 be89dccd57a352a7906b167c15227201d001c1f3f114fbd8b21fb701b972b0372a8bb9708e6d25de639773c08d2029579c3265ea69e8175869b650ad63fcf64e
SSDEEP 3072:GrkLjw7tYgBNidNYDPe0OhEFGUAUCma1jXjPmmFIy5w7p:G4LjwB/NidqFOhXUYmaQ7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff543c0f90a10780ccd10622ac8a879f0fd04f4b502e1b82557cca36c6e011c0

File Explorer

ff543c0f90a10780ccd10622ac8a879f0fd04f4b502e1b82557cca36c6e011c0

.exe 261KB

ff543c0f90a10780ccd10622ac8a879f0fd04f4b502e1b82557cca36c6e011c0

IMPHASH badcd5f7ef073deee8e482929ccaa33b
SHA256 ff543c0f90a10780ccd10622ac8a879f0fd04f4b502e1b82557cca36c6e011c0
MD5 d6561b802864d99de2722a33c63681a5
SHA1 3eb9e10daa4251bcf2309b31fe04082b672383f5
SHA512 be89dccd57a352a7906b167c15227201d001c1f3f114fbd8b21fb701b972b0372a8bb9708e6d25de639773c08d2029579c3265ea69e8175869b650ad63fcf64e
SSDEEP 3072:GrkLjw7tYgBNidNYDPe0OhEFGUAUCma1jXjPmmFIy5w7p:G4LjwB/NidqFOhXUYmaQ7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement EnumCalendarInfoW GetConsoleAliasA GetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA FormatMessageA LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW lstrcpynW GetTimeFormatW FindNextVolumeW SetTimeZoneInformation FileTimeToSystemTime CompareStringW RaiseException GetStringTypeExA CreateJobObjectA GetConsoleAliasesW SetThreadLocale SetLastError GetProcAddress SetVolumeLabelW VerLanguageNameW LoadLibraryA LocalAlloc GetModuleFileNameA SetConsoleCursorInfo SetConsoleTitleW lstrcatW GetProcessAffinityMask BuildCommDCBA PurgeComm EnumDateFormatsW DeleteCriticalSection DeleteAtom OpenFileMappingA EnumCalendarInfoExA GetLastError HeapFree HeapReAlloc HeapAlloc GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree LeaveCriticalSection EnterCriticalSection VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

ff543c0f90a10780ccd10622ac8a879f0fd04f4b502e1b82557cca36c6e011c0

kernel32

user32

generic