4e9cb246cb929c43584a5a07ceb58b00855657e8ab73901a380233ccfb54a920

Sharing

Copy URL Twitter E-mail

General

Target
4e9cb246cb929c43584a5a07ceb58b00855657e8ab73901a380233ccfb54a920
Size 508KB
Sample240809-rhn7vavgqd
SHA256 4e9cb246cb929c43584a5a07ceb58b00855657e8ab73901a380233ccfb54a920
MD5 c08f04edcca24592b96649acb86ffabd
SHA1 8196c51a2d8f4d141868f11f42ed4ca8bad8e0ed
SHA512 cf842f6bab7e648edc838c1cad823183a7514304469d944b8da55e65f0718b4f9afdc5a6f00d3aea40906ee129f13d9d9b29233bba4e307265f36447e2438c2a
SSDEEP 6144:PW0J07EHxsWKKCbrZXDbI33z5P/kjguInr39tAOLPvI1ILz:u4CWKKCrZTGF/k8uMxtxPvvz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e9cb246cb929c43584a5a07ceb58b00855657e8ab73901a380233ccfb54a920

File Explorer

4e9cb246cb929c43584a5a07ceb58b00855657e8ab73901a380233ccfb54a920

.exe 508KB

4e9cb246cb929c43584a5a07ceb58b00855657e8ab73901a380233ccfb54a920

IMPHASH 049cd5c61c56b1b627f941860ff6c3c0
SHA256 4e9cb246cb929c43584a5a07ceb58b00855657e8ab73901a380233ccfb54a920
MD5 c08f04edcca24592b96649acb86ffabd
SHA1 8196c51a2d8f4d141868f11f42ed4ca8bad8e0ed
SHA512 cf842f6bab7e648edc838c1cad823183a7514304469d944b8da55e65f0718b4f9afdc5a6f00d3aea40906ee129f13d9d9b29233bba4e307265f36447e2438c2a
SSDEEP 6144:PW0J07EHxsWKKCbrZXDbI33z5P/kjguInr39tAOLPvI1ILz:u4CWKKCrZTGF/k8uMxtxPvvz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

240503

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryA GetLocalTime GetTempPathA OpenFileMappingA CreateToolhelp32Snapshot QueryDosDeviceA OpenProcess GetPrivateProfileStringA Process32NextW MapViewOfFile GetLogicalDriveStringsA UnmapViewOfFile Process32FirstW CloseHandle GetTickCount DeleteFileA LockResource SizeofResource CreateFileA MultiByteToWideChar LoadResource WaitForSingleObject CreateProcessA FindResourceA GetModuleHandleA InitializeCriticalSection WriteFile GetVersionExA GetFileSize GetFileAttributesW ReadFile WideCharToMultiByte GetCurrentDirectoryW SetFilePointer SystemTimeToFileTime CreateDirectoryW LocalFileTimeToFileTime SetFileTime CreateFileW CreateEventA WaitNamedPipeA SetEvent GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW Sleep OutputDebugStringA EnterCriticalSection GetModuleFileNameA GetFileAttributesA SetUnhandledExceptionFilter GetEnvironmentStrings LeaveCriticalSection LoadLibraryA GetWindowsDirectoryA FreeEnvironmentStringsA FlushFileBuffers lstrlenA GetThreadLocale SetEndOfFile GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID InterlockedIncrement InterlockedDecrement InterlockedExchange DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetLastError HeapFree HeapAlloc ExitThread GetCurrentThreadId CreateThread GetCommandLineA GetProcessHeap RaiseException RtlUnwind LCMapStringA LCMapStringW GetCPInfo GetProcAddress ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapSize SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetConsoleCP GetConsoleMode HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetACP GetOEMCP

user32

wsprintfA LoadStringA

advapi32

RegSetValueExA RegCreateKeyA RegCloseKey

shell32

ShellExecuteA SHGetSpecialFolderPathA

ole32

CoCreateGuid CoCreateInstance CoInitialize

oleaut32

VariantClear SysAllocStringLen SysFreeString SysAllocString

psapi

GetProcessImageFileNameA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

iphlpapi

GetAdaptersInfo

wininet

HttpSendRequestA InternetOpenA InternetConnectA InternetReadFile HttpOpenRequestA InternetCloseHandle InternetQueryOptionA InternetSetOptionA HttpQueryInfoA

Sharing

General

Malware Config

Signatures

File Explorer

4e9cb246cb929c43584a5a07ceb58b00855657e8ab73901a380233ccfb54a920

kernel32

user32

advapi32

shell32

ole32

oleaut32

psapi

version

iphlpapi

wininet

generic