4b9e6b0815483aaedc21f10cdeb3eab4fb2d612a733b54159bf8bf353dca5f2e

Sharing

Copy URL Twitter E-mail

General

Target
4b9e6b0815483aaedc21f10cdeb3eab4fb2d612a733b54159bf8bf353dca5f2e
Size 222KB
Sample240703-xyt1xsteql
SHA256 4b9e6b0815483aaedc21f10cdeb3eab4fb2d612a733b54159bf8bf353dca5f2e
MD5 9b98704eb6d7182b56beb3b10f3b9e42
SHA1 b3ab0460ee86f4c7d1d0ebfd558296aa61c11ce5
SHA512 412555031ec8c79cec23482deb7d42eea465761235c4852176614056160d5b8b65de37013a62817551969f8caea80aa8fb79111926e6c8fc2f08807ea4b42e9c
SSDEEP 3072:6/84OoZMyea6umqvdglRSe1cGV34BDH6H2uFKf1LB4EYXpzStOaWuL0IH0:6WkMapmqvy3jnRWDaH2M2BV4pzqzL0I
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b9e6b0815483aaedc21f10cdeb3eab4fb2d612a733b54159bf8bf353dca5f2e

File Explorer

4b9e6b0815483aaedc21f10cdeb3eab4fb2d612a733b54159bf8bf353dca5f2e

.exe 222KB

4b9e6b0815483aaedc21f10cdeb3eab4fb2d612a733b54159bf8bf353dca5f2e

IMPHASH 551201303920b450eb819c22e3470d5f
SHA256 4b9e6b0815483aaedc21f10cdeb3eab4fb2d612a733b54159bf8bf353dca5f2e
MD5 9b98704eb6d7182b56beb3b10f3b9e42
SHA1 b3ab0460ee86f4c7d1d0ebfd558296aa61c11ce5
SHA512 412555031ec8c79cec23482deb7d42eea465761235c4852176614056160d5b8b65de37013a62817551969f8caea80aa8fb79111926e6c8fc2f08807ea4b42e9c
SSDEEP 3072:6/84OoZMyea6umqvdglRSe1cGV34BDH6H2uFKf1LB4EYXpzStOaWuL0IH0:6WkMapmqvy3jnRWDaH2M2BV4pzqzL0I
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW CommConfigDialogA SetEndOfFile InterlockedDecrement CreateDirectoryW WriteConsoleInputA GetWindowsDirectoryA TlsSetValue GlobalFindAtomA LoadLibraryW IsBadStringPtrA ReplaceFileA GlobalUnlock SetLastError GetProcAddress SetFileAttributesA GetDiskFreeSpaceW FindResourceA LocalAlloc AddVectoredExceptionHandler GlobalGetAtomNameW OpenJobObjectW EnumResourceTypesW GetOEMCP LoadLibraryExA OpenFileMappingW TerminateJobObject CreateFileW FlushFileBuffers HeapReAlloc WriteConsoleW SetStdHandle RaiseException HeapSize CreateFileA LoadLibraryA GetDateFormatW GetStringTypeW LCMapStringW MultiByteToWideChar GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection GetLastError HeapFree GetCPInfo InterlockedIncrement GetACP IsValidCodePage TlsAlloc TlsGetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount DeleteCriticalSection WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode Sleep RtlUnwind CloseHandle

user32

GetKeyboardLayoutNameA SetMessageExtraInfo GetCaretPos InsertMenuItemW CharUpperBuffW DdeKeepStringHandle GetClassInfoW

gdi32

GetTextMetricsA GetCharWidthA

ole32

CoSuspendClassObjects CoMarshalHresult

winhttp

WinHttpCheckPlatform

Sharing

General

Malware Config

Signatures

File Explorer

4b9e6b0815483aaedc21f10cdeb3eab4fb2d612a733b54159bf8bf353dca5f2e

kernel32

user32

gdi32

ole32

winhttp

generic