9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a

General

Target
9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a
Size 264KB
Sample240622-kmtvkasbla
SHA256 9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a
MD5 ac1b9dbf2cde29e1d6106b6016866617
SHA1 7cf864139dd0675db6fc14c0fb810650c4282f77
SHA512 19e45af09b3b507c89a4a09cf8f35e87a400ca8357aed6b7301687def9b982f742d4ab69e61217dc8d494422f8bebab5236acc7a25cb0f314c3ad22c5b588e79
SSDEEP 3072:m3Uq9xqR0SHtsrltkgtRL2/GyyL66HyapV2rAVtlMr0XvivTk3VInF23MUV:pV0SHCPrcBKcEVHMkK70VUF23M
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a

File Explorer

9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a

.exe 264KB

9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a

IMPHASH 6e886f36583c3f6134aead04a4c6bb25
SHA256 9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a
MD5 ac1b9dbf2cde29e1d6106b6016866617
SHA1 7cf864139dd0675db6fc14c0fb810650c4282f77
SHA512 19e45af09b3b507c89a4a09cf8f35e87a400ca8357aed6b7301687def9b982f742d4ab69e61217dc8d494422f8bebab5236acc7a25cb0f314c3ad22c5b588e79
SSDEEP 3072:m3Uq9xqR0SHtsrltkgtRL2/GyyL66HyapV2rAVtlMr0XvivTk3VInF23MUV:pV0SHCPrcBKcEVHMkK70VUF23M
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue OpenJobObjectA InterlockedCompareExchange CreateHardLinkA GetSystemDefaultLCID GetTickCount GlobalFindAtomA LoadLibraryW GetConsoleAliasW IsBadWritePtr SetLastError GetProcAddress SetFileAttributesA LoadLibraryA OpenMutexA LocalAlloc GetConsoleAliasesLengthW GetNumberFormatW GetDiskFreeSpaceA GlobalHandle EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA LoadLibraryExA OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW SetStdHandle WriteConsoleW CloseHandle SetFilePointer FlushFileBuffers FindResourceA IsBadStringPtrW GetComputerNameA FindFirstVolumeMountPointW GetSystemDefaultLangID MultiByteToWideChar DecodePointer EncodePointer GetLastError HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate HeapFree HeapAlloc WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep RtlUnwind LCMapStringW GetStringTypeW HeapSize RaiseException GetConsoleCP GetConsoleMode CreateFileW

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementA

advapi32

BackupEventLogA ClearEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a

kernel32

user32

gdi32

advapi32

generic