8fd4c66e2864ac0827a57b3fdb27a2a1adb28228969134bb1dd9971b07c7144f

General

Target
8fd4c66e2864ac0827a57b3fdb27a2a1adb28228969134bb1dd9971b07c7144f
Size 164KB
Sample240712-aaymwaserc
SHA256 8fd4c66e2864ac0827a57b3fdb27a2a1adb28228969134bb1dd9971b07c7144f
MD5 f7384f89717636b18a0b9a2f38a0bdc2
SHA1 deb3bcce0374a5a815fa240ba3a18cd0b6064529
SHA512 dd366c44a7f1c657e7b98792b3f04c3cfae1bfce6505c7080b565d836cbdb31f8b22cc9e2b65173deb44e7c336042ac02711747f6a986a7428c65af0e065a8c7
SSDEEP 3072:9jGcLI2Kn7hVxtT78Pl5IhhoC5olyRTvq91lFIi:ocLI2Kn7/H4PlihhYeTi91
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fd4c66e2864ac0827a57b3fdb27a2a1adb28228969134bb1dd9971b07c7144f

File Explorer

8fd4c66e2864ac0827a57b3fdb27a2a1adb28228969134bb1dd9971b07c7144f

.exe 164KB

8fd4c66e2864ac0827a57b3fdb27a2a1adb28228969134bb1dd9971b07c7144f

IMPHASH 94dae44f10027b0c4f2dfac439252c40
SHA256 8fd4c66e2864ac0827a57b3fdb27a2a1adb28228969134bb1dd9971b07c7144f
MD5 f7384f89717636b18a0b9a2f38a0bdc2
SHA1 deb3bcce0374a5a815fa240ba3a18cd0b6064529
SHA512 dd366c44a7f1c657e7b98792b3f04c3cfae1bfce6505c7080b565d836cbdb31f8b22cc9e2b65173deb44e7c336042ac02711747f6a986a7428c65af0e065a8c7
SSDEEP 3072:9jGcLI2Kn7hVxtT78Pl5IhhoC5olyRTvq91lFIi:ocLI2Kn7/H4PlihhYeTi91
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6045

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx GetCommProperties GetModuleHandleW GetConsoleAliasesA GetConsoleAliasesLengthA GlobalAlloc LoadLibraryW Sleep SetVolumeMountPointA lstrcpynW WriteConsoleW GetAtomNameW WritePrivateProfileStringW CreateJobObjectA InterlockedExchange SetLastError GetProcAddress BuildCommDCBW LoadLibraryA UnhandledExceptionFilter LocalAlloc AddAtomW SetFileApisToANSI OpenJobObjectW FoldStringA GetModuleFileNameA EnumDateFormatsA lstrcatW GetShortPathNameW FindFirstVolumeA FlushFileBuffers CloseHandle CreateFileA GetLastError HeapFree MultiByteToWideChar HeapReAlloc HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP HeapSize

user32

GetProcessDefaultLayout

ole32

CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

8fd4c66e2864ac0827a57b3fdb27a2a1adb28228969134bb1dd9971b07c7144f

kernel32

user32

ole32

generic