9b9cf06df2d9bd1178ce117a631345ed7961e96ec68198887db86f01257d1939[.]exe

General

Target
9b9cf06df2d9bd1178ce117a631345ed7961e96ec68198887db86f01257d1939.exe
Size 778KB
Sample260830-yd39jagp21
SHA256 9b9cf06df2d9bd1178ce117a631345ed7961e96ec68198887db86f01257d1939
MD5 f2ec3df548e2848a000859377861280f
SHA1 9412d99fb1e6d34bbbeb6b71b4e991343b42414b
SHA512 ad80bea3ddca459360dc6f15455932256c690fdb369953d12640c85a13ddddf12b7b71dbb16c63cb41d9de9ef6ce137c8484df9f8107d464c42eff7b569cc709
SSDEEP 12288:VQ/3UdnGOzhDBRVaXTTXFdqt/at0D4PE+g/Re6JjaQbQqvpjWYsw:VcUdGOzHT0TTVdqta8pLReKjaQbxof
TLSH
T12505011273D0D072E14216BA4E75CBB11B2AFCB28F5466FF67942A2F0E712D1D9B1326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b9cf06df2d9bd1178ce117a631345ed7961e96ec68198887db86f01257d1939.exe

File Explorer

9b9cf06df2d9bd1178ce117a631345ed7961e96ec68198887db86f01257d1939.exe

.exe 778KB

9b9cf06df2d9bd1178ce117a631345ed7961e96ec68198887db86f01257d1939.exe

IMPHASH 84a77ce99ce4e1222b2ec1f89cb1aad9
SHA256 9b9cf06df2d9bd1178ce117a631345ed7961e96ec68198887db86f01257d1939
MD5 f2ec3df548e2848a000859377861280f
SHA1 9412d99fb1e6d34bbbeb6b71b4e991343b42414b
SHA512 ad80bea3ddca459360dc6f15455932256c690fdb369953d12640c85a13ddddf12b7b71dbb16c63cb41d9de9ef6ce137c8484df9f8107d464c42eff7b569cc709
SSDEEP 12288:VQ/3UdnGOzhDBRVaXTTXFdqt/at0D4PE+g/Re6JjaQbQqvpjWYsw:VcUdGOzHT0TTVdqta8pLReKjaQbxof
TLSH
T12505011273D0D072E14216BA4E75CBB11B2AFCB28F5466FF67942A2F0E712D1D9B1326
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

43852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA FindFirstFileW SetLocaleInfoA HeapAlloc UpdateResourceA DeleteVolumeMountPointA InterlockedDecrement GetNamedPipeHandleStateA WriteConsoleInputA GetComputerNameW LocalFlags FindNextVolumeMountPointA GetNumberFormatA GetWindowsDirectoryA WriteFile GetCommandLineA GlobalAlloc GetLocaleInfoW ReadConsoleInputA SetConsoleCP GetBinaryTypeA CreateFileW CreateActCtxA GetStartupInfoW CreateJobObjectA DeleteFiber GetLastError GetCurrentDirectoryW GetProcAddress HeapSize VerLanguageNameA IsValidCodePage LoadLibraryA WriteConsoleA OpenWaitableTimerW GetConsoleScreenBufferInfo MoveFileA BuildCommDCBAndTimeoutsW FindNextFileA GetModuleHandleA GetCPInfoExA SetProcessShutdownParameters LocalSize OpenFileMappingA GetProfileSectionW ExpandEnvironmentStringsW FlushFileBuffers WriteConsoleW SetStdHandle WideCharToMultiByte InterlockedIncrement InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree DeleteFileA HeapSetInformation GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetACP GetOEMCP TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId ExitProcess GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode LoadLibraryW CloseHandle

user32

CharToOemBuffW CharUpperA

Sharing