1f9088d9ff0c6e27d040cc65ea89d2203891b45e

General

Target
1f9088d9ff0c6e27d040cc65ea89d2203891b45e
Size 219KB
Sample241110-h19rtssdrf
SHA256 3be9da09c5daee48ef47fb8b6aa5fcecb63013364b81d771af3100edf476a420
MD5 ec2b6b61985fc6ca547d233a15e5c28b
SHA1 1f9088d9ff0c6e27d040cc65ea89d2203891b45e
SHA512 b111287561141bfb32ce78d64a713a29fa627b9fa24071cea2966f532c277985611e80382393105839bca7cbdfacc6d24be8ac1c4e13d8033641c4649738e0b5
SSDEEP 3072:0U1lWplor2ECGNIwjFQ1u8shLrq0MfYn9j5Dcyy8Th9pM/h3isxkgaBCh:Z1se2uNT0u8x0MfY9j5Dch4peiga
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f9088d9ff0c6e27d040cc65ea89d2203891b45e

File Explorer

1f9088d9ff0c6e27d040cc65ea89d2203891b45e

.exe 219KB

1f9088d9ff0c6e27d040cc65ea89d2203891b45e

IMPHASH 167a11a5e44af6f0ea8f611729619ccb
SHA256 3be9da09c5daee48ef47fb8b6aa5fcecb63013364b81d771af3100edf476a420
MD5 ec2b6b61985fc6ca547d233a15e5c28b
SHA1 1f9088d9ff0c6e27d040cc65ea89d2203891b45e
SHA512 b111287561141bfb32ce78d64a713a29fa627b9fa24071cea2966f532c277985611e80382393105839bca7cbdfacc6d24be8ac1c4e13d8033641c4649738e0b5
SSDEEP 3072:0U1lWplor2ECGNIwjFQ1u8shLrq0MfYn9j5Dcyy8Th9pM/h3isxkgaBCh:Z1se2uNT0u8x0MfY9j5Dch4peiga
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

27044

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hecadifisebo\cekugakam\zocux.pdb

kernel32

FoldStringW InterlockedDecrement _lwrite CancelWaitableTimer WaitNamedPipeW BuildCommDCBA GetConsoleAliasExesLengthA PeekConsoleInputW CreateFileW EnumResourceTypesW GetCPInfoExA GetFirmwareEnvironmentVariableW GetModuleFileNameA BeginUpdateResourceA WriteConsoleA DeleteFileA LocalAlloc GetProcAddress GetModuleHandleW GetUserDefaultLCID GetConsoleAliasA FindFirstChangeNotificationA LocalReAlloc RemoveDirectoryA lstrcpynW FindFirstFileExW AreFileApisANSI GetCurrentDirectoryW GetConsoleAliasesLengthW SetConsoleTitleW SetThreadLocale GetSystemDefaultLCID GetCurrentProcess FindNextFileW OpenJobObjectA _lopen GetComputerNameW GetFileAttributesExA SetComputerNameW GetDiskFreeSpaceA SetEndOfFile FillConsoleOutputCharacterA RaiseException RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EncodePointer DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess SetFilePointer MultiByteToWideChar ReadFile ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers CloseHandle CreateFileA LoadLibraryW HeapReAlloc LCMapStringW GetStringTypeW WriteConsoleW GetProcessHeap

user32

ScreenToClient

advapi32

IsTokenRestricted

Sharing

General

Malware Config

Signatures

File Explorer

1f9088d9ff0c6e27d040cc65ea89d2203891b45e

kernel32

user32

advapi32

generic