cf9a5b156802037cb9c5638b04403d1cc6b2f0c40ad0a675af699a9ad49ab571

Sharing

Copy URL Twitter E-mail

General

Target
cf9a5b156802037cb9c5638b04403d1cc6b2f0c40ad0a675af699a9ad49ab571
Size 279KB
Sample240710-aj7bdawfmf
SHA256 cf9a5b156802037cb9c5638b04403d1cc6b2f0c40ad0a675af699a9ad49ab571
MD5 f746e1b69c6ddec58d4e3d4f790f23a9
SHA1 785fda23c4a470fcbaa5920096cae8b02150ab72
SHA512 2836c0eb726e8925d75697e22c1617af10ff1e830b6637457c840ff99182bbb2257886cde94cf64146659758f8877312f549c01446cea987d5bc2e1f4bc07451
SSDEEP 3072:YX4+61TLflELYn4EIdg22PZuMNZ/raAEzy+AqaUYMcmP0ObBzhIAiUDcGlUmwp8Y:Rf5xA2+aZnX2FaUZ3PrQAi6lUJp8TM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf9a5b156802037cb9c5638b04403d1cc6b2f0c40ad0a675af699a9ad49ab571

File Explorer

cf9a5b156802037cb9c5638b04403d1cc6b2f0c40ad0a675af699a9ad49ab571

.exe 279KB

cf9a5b156802037cb9c5638b04403d1cc6b2f0c40ad0a675af699a9ad49ab571

IMPHASH 14021193c0e34fb8d99c0febafffced3
SHA256 cf9a5b156802037cb9c5638b04403d1cc6b2f0c40ad0a675af699a9ad49ab571
MD5 f746e1b69c6ddec58d4e3d4f790f23a9
SHA1 785fda23c4a470fcbaa5920096cae8b02150ab72
SHA512 2836c0eb726e8925d75697e22c1617af10ff1e830b6637457c840ff99182bbb2257886cde94cf64146659758f8877312f549c01446cea987d5bc2e1f4bc07451
SSDEEP 3072:YX4+61TLflELYn4EIdg22PZuMNZ/raAEzy+AqaUYMcmP0ObBzhIAiUDcGlUmwp8Y:Rf5xA2+aZnX2FaUZ3PrQAi6lUJp8TM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8519

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile FindResourceW LocalCompact WriteConsoleInputA GetComputerNameW GetWindowsDirectoryA GetDateFormatA SetProcessPriorityBoost GlobalFindAtomA LoadLibraryW FreeConsole CreateEventA GetModuleFileNameW CreateFileW GetACP IsBadStringPtrA ReplaceFileA CreateDirectoryA GetLastError CommConfigDialogA GetProcAddress GlobalFree GetDiskFreeSpaceW LocalAlloc EnumResourceTypesW GetModuleHandleA CancelIo OpenFileMappingW GetWindowsDirectoryW SetFileAttributesW RaiseException HeapReAlloc HeapAlloc GetStringTypeW MultiByteToWideChar SetLastError RemoveVectoredExceptionHandler LCMapStringW HeapSize RtlUnwind Sleep IsValidCodePage HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW IsProcessorFeaturePresent HeapCreate SetUnhandledExceptionFilter GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess LeaveCriticalSection EnterCriticalSection GetCPInfo GetOEMCP

user32

GetKeyboardLayoutNameA SetMessageExtraInfo GetCaretPos DdeCmpStringHandles GetClassInfoW InsertMenuItemW CharUpperBuffA

advapi32

GetLengthSid

ole32

CoSuspendClassObjects CoUnmarshalHresult

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

cf9a5b156802037cb9c5638b04403d1cc6b2f0c40ad0a675af699a9ad49ab571

kernel32

user32

advapi32

ole32

winhttp

generic