0b9119f9b84a88de8dfbeae5e2211433c1195759297531801257e6134b8b5037

Sharing

Copy URL Twitter E-mail

General

Target
0b9119f9b84a88de8dfbeae5e2211433c1195759297531801257e6134b8b5037
Size 51KB
Sample260902-ttnfssswf1
SHA256 0b9119f9b84a88de8dfbeae5e2211433c1195759297531801257e6134b8b5037
MD5 262d867111476ceaee4ac1f9b803bb9e
SHA1 f70fcb582a0891b0d456e9cc52499659b9aff441
SHA512 667e5b15738c407584831d12e86c040a1c0bcba5ad1b3b165954e9fbd4ce38a4cb31580f72e864e51e3e733c5205881971d156b5363e50899cc26842e95ee9fe
SSDEEP 768:3MAObOZX7jbycRBD4YaHXkQDGD9jpcigpbWoiAGbfek45UUnGgl2P3V4R9J:0CXL/ZC0QiP+8AGbfaUSGggP3Vo9J
TLSH
T14133291153B6D10BF8F3BAF82E3881511E637A35A832855977C88E9E57B3DC2D520B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b9119f9b84a88de8dfbeae5e2211433c1195759297531801257e6134b8b5037

File Explorer

0b9119f9b84a88de8dfbeae5e2211433c1195759297531801257e6134b8b5037

.exe 51KB

0b9119f9b84a88de8dfbeae5e2211433c1195759297531801257e6134b8b5037

IMPHASH d50a072b31f602231ac785d7a8454df5
SHA256 0b9119f9b84a88de8dfbeae5e2211433c1195759297531801257e6134b8b5037
MD5 262d867111476ceaee4ac1f9b803bb9e
SHA1 f70fcb582a0891b0d456e9cc52499659b9aff441
SHA512 667e5b15738c407584831d12e86c040a1c0bcba5ad1b3b165954e9fbd4ce38a4cb31580f72e864e51e3e733c5205881971d156b5363e50899cc26842e95ee9fe
SSDEEP 768:3MAObOZX7jbycRBD4YaHXkQDGD9jpcigpbWoiAGbfek45UUnGgl2P3V4R9J:0CXL/ZC0QiP+8AGbfaUSGggP3Vo9J
TLSH
T14133291153B6D10BF8F3BAF82E3881511E637A35A832855977C88E9E57B3DC2D520B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AreFileApisANSI GetTickCount FreeConsole TlsAlloc CancelDeviceWakeupRequest GetConsoleTitleW SetCurrentDirectoryW GetEnvironmentStrings CreateNamedPipeA OpenWaitableTimerW CreateMailslotW FindNextVolumeA GetLocaleInfoW GetFullPathNameW FoldStringA SetProcessAffinityMask GetNumberFormatA GlobalFindAtomW AreFileApisANSI HeapAlloc LeaveCriticalSection GetSystemInfo GetProfileSectionA RegisterWaitForSingleObjectEx GetCommTimeouts FindFirstVolumeA CreateDirectoryExW WritePrivateProfileSectionA WriteConsoleOutputAttribute DisconnectNamedPipe SetConsoleOutputCP SetCalendarInfoA ReadConsoleOutputW CopyFileA SetConsoleScreenBufferSize OpenEventA WaitCommEvent SetThreadPriority AssignProcessToJobObject GetComputerNameW GetNamedPipeInfo

ole32

CreateStreamOnHGlobal CoRegisterPSClsid HMENU_UserSize CoCopyProxy OleTranslateAccelerator OleRun CreateILockBytesOnHGlobal StgIsStorageILockBytes

msvcrt

fputc _wtoi atol isdigit _wexecle memcpy _lrotr bsearch wcsncmp _wgetenv fputws _wspawnlp ungetwc _wexecv _tempnam fwrite isprint free _wspawnve wcscoll _wspawnlpe wcsspn _wexeclpe fflush strtok _fgetwchar _wgetdcwd wcscmp _vsnwprintf _wremove _flsbuf

winmm

midiOutMessage midiInGetDevCapsW midiInStart midiStreamPause mciGetErrorStringW mmioSetBuffer waveOutClose PlaySoundA mixerGetDevCapsW midiOutGetErrorTextW waveOutGetErrorTextA mmioDescend mciGetDeviceIDFromElementIDA waveInAddBuffer mciGetYieldProc joyGetThreshold waveInUnprepareHeader mixerGetLineInfoA auxGetNumDevs joySetCapture midiStreamProperty waveOutGetErrorTextW mixerGetNumDevs waveInStart midiStreamClose midiInClose joyGetPosEx waveOutGetID waveOutPrepareHeader waveInGetPosition midiStreamStop auxOutMessage mciGetDeviceIDA mixerGetDevCapsA midiInGetErrorTextA

mscms

CreateMultiProfileTransform ConvertIndexToColorName GetCMMInfo DisassociateColorProfileFromDeviceW SelectCMM DisassociateColorProfileFromDeviceA OpenColorProfileW CreateProfileFromLogColorSpaceW GetColorDirectoryW CreateProfileFromLogColorSpaceA RegisterCMMA AssociateColorProfileWithDeviceA OpenColorProfileA GetColorProfileElement InstallColorProfileW GetPS2ColorRenderingDictionary GetStandardColorSpaceProfileW SetColorProfileElementReference GetColorProfileFromHandle GetStandardColorSpaceProfileA UninstallColorProfileW GetCountColorProfileElements SetColorProfileHeader CloseColorProfile GetColorProfileHeader TranslateBitmapBits SetColorProfileElementSize

Name

.text

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

512B

Virtual Size

467B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0b9119f9b84a88de8dfbeae5e2211433c1195759297531801257e6134b8b5037

kernel32

ole32

msvcrt

winmm

mscms

generic