9286c626bd0644f398e0be328c180c9f[.]exe

General

Target
9286c626bd0644f398e0be328c180c9f.exe
Size 370KB
Sample240619-wwfj3swblb
SHA256 8d2b3c1960f65f7124c0833076e8c2da980c7d2a4d4fdd11aaec58fbc03485d2
MD5 9286c626bd0644f398e0be328c180c9f
SHA1 a85c12d9cd6ff1a690d3408bbb01a8a5db196abc
SHA512 1fee32d5808ef8864a8ec2f4f36686e804902a959decc9e0285ff942ff7361695ae9bed92f060cab13d51701a17fb5679729b5d26fce98a9eb260b45edb4fc11
SSDEEP 6144:RRSRaVtqmFBILZbG0crEKS3D91gD7UmQXebK0JxzcH:gaVtqmFWNGG33DaZbDoH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9286c626bd0644f398e0be328c180c9f.exe

File Explorer

9286c626bd0644f398e0be328c180c9f.exe

.exe 370KB

9286c626bd0644f398e0be328c180c9f.exe

IMPHASH 4dbf6d5dc26b4cec659971ecb90a1590
SHA256 8d2b3c1960f65f7124c0833076e8c2da980c7d2a4d4fdd11aaec58fbc03485d2
MD5 9286c626bd0644f398e0be328c180c9f
SHA1 a85c12d9cd6ff1a690d3408bbb01a8a5db196abc
SHA512 1fee32d5808ef8864a8ec2f4f36686e804902a959decc9e0285ff942ff7361695ae9bed92f060cab13d51701a17fb5679729b5d26fce98a9eb260b45edb4fc11
SSDEEP 6144:RRSRaVtqmFBILZbG0crEKS3D91gD7UmQXebK0JxzcH:gaVtqmFWNGG33DaZbDoH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FindResourceA GlobalCompact GetCPInfo FindResourceW CreateHardLinkA GetSystemDefaultLCID OutputDebugStringW GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GlobalAlloc GlobalFindAtomA LoadLibraryW ReadProcessMemory GetConsoleAliasW IsBadStringPtrA OpenMutexW GetLastError SetLastError GetProcAddress SetFileAttributesA LoadLibraryA InterlockedExchangeAdd FindFirstVolumeMountPointW GetDiskFreeSpaceA EnumResourceTypesW LoadLibraryExA lstrcatW BuildCommDCBA TerminateJobObject GetWindowsDirectoryW OpenFileMappingA CreateFileW WriteConsoleW HeapFree GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW HeapCreate HeapAlloc SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle RtlUnwind WideCharToMultiByte GetACP GetOEMCP IsValidCodePage HeapSize RaiseException HeapReAlloc IsProcessorFeaturePresent GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW CloseHandle

user32

GetKeyboardLayoutNameW DdeCmpStringHandles GetCaretPos GetWindowTextLengthA

Sharing