9b471c366c20e4fd0e226a4fd7bf8fcbdaa11ef78ba3f881a98d0a0928de731b

General

Target
9b471c366c20e4fd0e226a4fd7bf8fcbdaa11ef78ba3f881a98d0a0928de731b
Size 338KB
Sample241110-e5y94szerb
SHA256 9b471c366c20e4fd0e226a4fd7bf8fcbdaa11ef78ba3f881a98d0a0928de731b
MD5 eaf254c6e81ca8e872988dad5de578ad
SHA1 c895f8c07fb1501f441dae05d9feb809eb01c3a3
SHA512 f846ac5cfe54715df9878ed199ab6cc2363cea8558048cf846d56487fba27bb574ae5d38f9bc00b28491fb7cfd57f978baf1730bbccbe57cd6892f72136643eb
SSDEEP 6144:0HQ94W2q7Wzw9qoYfnxaKPa4+/3EkWbfDpjp:GfFq7IWJYfxaKPi/3nWbb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b471c366c20e4fd0e226a4fd7bf8fcbdaa11ef78ba3f881a98d0a0928de731b

File Explorer

9b471c366c20e4fd0e226a4fd7bf8fcbdaa11ef78ba3f881a98d0a0928de731b

.exe 338KB

9b471c366c20e4fd0e226a4fd7bf8fcbdaa11ef78ba3f881a98d0a0928de731b

IMPHASH 61b48ca689a3ea2404ab8a6768ce938b
SHA256 9b471c366c20e4fd0e226a4fd7bf8fcbdaa11ef78ba3f881a98d0a0928de731b
MD5 eaf254c6e81ca8e872988dad5de578ad
SHA1 c895f8c07fb1501f441dae05d9feb809eb01c3a3
SHA512 f846ac5cfe54715df9878ed199ab6cc2363cea8558048cf846d56487fba27bb574ae5d38f9bc00b28491fb7cfd57f978baf1730bbccbe57cd6892f72136643eb
SSDEEP 6144:0HQ94W2q7Wzw9qoYfnxaKPa4+/3EkWbfDpjp:GfFq7IWJYfxaKPi/3nWbb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yujehaw23-vo.pdb

kernel32

FileTimeToDosDateTime UnregisterWait DosDateTimeToFileTime SetVolumeLabelA CreateTimerQueue FindFirstChangeNotificationW InterlockedDecrement SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW FlushViewOfFile FreeEnvironmentStringsA GetPrivateProfileStringW GetSystemWow64DirectoryA CreateActCtxW GetDriveTypeA _hread GetVersionExW VerifyVersionInfoA GetModuleFileNameW GetOverlappedResult CompareStringW lstrlenW GetStartupInfoW InterlockedExchange SetCurrentDirectoryA IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA VirtualAlloc GetConsoleDisplayMode CreateMemoryResourceNotification SearchPathA LoadLibraryA OpenMutexA LocalAlloc SetFileApisToANSI WriteProfileSectionW AddAtomA HeapWalk FindAtomA SetEnvironmentVariableA WTSGetActiveConsoleSessionId GetThreadPriority GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW RequestWakeupLatency OutputDebugStringA GetCPInfoExA GetVersionExA DeleteFileW AddConsoleAliasA CloseHandle CreateFileW SetStdHandle InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation RaiseException GetModuleHandleW ExitProcess GetLastError WriteFile GetStdHandle IsProcessorFeaturePresent HeapValidate IsBadReadPtr InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageTime DrawCaption

Sharing

General

Malware Config

Signatures

File Explorer

9b471c366c20e4fd0e226a4fd7bf8fcbdaa11ef78ba3f881a98d0a0928de731b

kernel32

user32

generic