009c09f3118ec6a3a59a4ec3f07128e13a4e996791c8607f5e01e6652fa955b1[.]exe

General

Target
009c09f3118ec6a3a59a4ec3f07128e13a4e996791c8607f5e01e6652fa955b1.exe
Size 432KB
Sample241020-bfannszdkf
SHA256 009c09f3118ec6a3a59a4ec3f07128e13a4e996791c8607f5e01e6652fa955b1
MD5 8b8fc0b45d44ed10baab660a15116053
SHA1 20b7b21f629a540bfb08787e99c61caf1f7125ea
SHA512 2ae40b34bc81c44fff9865ddc109178675d4083605198f87daec2ba90290e36d1152ba6805d53dfc0655d07c885d3783bfe420100b12f2aca27490f75fb5f849
SSDEEP 6144:8d3LmbSN1N0jloYl6xbuJou8yPvmGL2ccdYk/uyM5vDzD/7sFj:y3rN16jmG6x6ucCrmBP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
009c09f3118ec6a3a59a4ec3f07128e13a4e996791c8607f5e01e6652fa955b1.exe

File Explorer

009c09f3118ec6a3a59a4ec3f07128e13a4e996791c8607f5e01e6652fa955b1.exe

.exe 432KB

009c09f3118ec6a3a59a4ec3f07128e13a4e996791c8607f5e01e6652fa955b1.exe

IMPHASH 83f35f43fce4a9cc963f1fca5e5afd3b
SHA256 009c09f3118ec6a3a59a4ec3f07128e13a4e996791c8607f5e01e6652fa955b1
MD5 8b8fc0b45d44ed10baab660a15116053
SHA1 20b7b21f629a540bfb08787e99c61caf1f7125ea
SHA512 2ae40b34bc81c44fff9865ddc109178675d4083605198f87daec2ba90290e36d1152ba6805d53dfc0655d07c885d3783bfe420100b12f2aca27490f75fb5f849
SSDEEP 6144:8d3LmbSN1N0jloYl6xbuJou8yPvmGL2ccdYk/uyM5vDzD/7sFj:y3rN16jmG6x6ucCrmBP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19425

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA TlsGetValue GetConsoleAliasExesA CreateProcessW ClearCommError InterlockedIncrement OpenJobObjectA GetCurrentProcess SetEnvironmentVariableW SetComputerNameW GetTickCount GetNumberFormatA EnumTimeFormatsA GetCurrencyFormatW GetEnvironmentStrings SetFileShortNameW LoadLibraryW GetLocaleInfoW ReadConsoleInputA SetVolumeMountPointA GetVersionExW GetFileAttributesA GetTimeFormatW CreateSemaphoreA GetModuleFileNameW CreateActCtxA GetShortPathNameA CreateJobObjectA VerifyVersionInfoW InterlockedExchange GetLogicalDriveStringsA GetLastError GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc CreateNamedPipeA DefineDosDeviceA GlobalFree GetTempFileNameA LoadLibraryA InterlockedExchangeAdd GetNumberFormatW OpenEventA GetCommMask GetModuleFileNameA EnumDateFormatsA GlobalUnWire GetShortPathNameW GetDiskFreeSpaceExA SetFileAttributesW LCMapStringW CommConfigDialogW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapAlloc HeapFree FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetModuleHandleA LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW

user32

GetAltTabInfoW

winhttp

WinHttpOpen

Sharing